Ten Big Breaches In 201111/29/2011No one was immune: not social networks, not financial institutions, and not even security firms
March 15, 2011: Comodo
What happened: An attacker stole the username and password belonging to a Comodo trusted partner and used the credentials to register nine SSL certificates for seven high-value domains, including Google, Skype, and Yahoo. An Iranian hacker takes credit for the attack -- and a later attack on DigiNotar -- on Pastebin.
Losses: Nine certificates for high-quality domains and the unquestioning trust that many users had in the system of certificate authorities.
|