{"id":10591,"date":"2020-12-11T07:00:00","date_gmt":"2020-12-11T15:00:00","guid":{"rendered":"https:\/\/formtek.com\/blog\/?p=10591"},"modified":"2020-12-10T10:56:41","modified_gmt":"2020-12-10T18:56:41","slug":"cyberhacking-even-security-pros-are-vulnerable","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/cyberhacking-even-security-pros-are-vulnerable\/","title":{"rendered":"Cyberhacking: Even Security Pros are Vulnerable"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">If a top cybersecurity company can be hacked, it should give you pause about the safety of your information online.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Earlier this week FireEye&#8217;s CEO, <a href=\"https:\/\/www.fireeye.com\/company\/leadership\/kevin-mandia.html\" data-type=\"URL\" data-id=\"https:\/\/www.fireeye.com\/company\/leadership\/kevin-mandia.html\">Kevin Mandia<\/a>, <a href=\"https:\/\/www.fireeye.com\/blog\/products-and-services\/2020\/12\/fireeye-shares-details-of-recent-cyber-attack-actions-to-protect-community.html\" data-type=\"URL\" data-id=\"https:\/\/www.fireeye.com\/blog\/products-and-services\/2020\/12\/fireeye-shares-details-of-recent-cyber-attack-actions-to-protect-community.html\">announced that<\/a> their company had been hacked and some of the assessment tools used by FireEye to test customer security had been accessed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">FireEye is in the business of protecting companies from hacking attacks.  FireEye isn&#8217;t the first security company to be hacked.  <a href=\"https:\/\/krebsonsecurity.com\/2013\/02\/security-firm-bit9-hacked-used-to-spread-malware\/\" data-type=\"URL\" data-id=\"https:\/\/krebsonsecurity.com\/2013\/02\/security-firm-bit9-hacked-used-to-spread-malware\/\">Bit9<\/a>, <a href=\"https:\/\/www.nytimes.com\/2017\/10\/10\/technology\/kaspersky-lab-israel-russia-hacking.html\" data-type=\"URL\" data-id=\"https:\/\/www.nytimes.com\/2017\/10\/10\/technology\/kaspersky-lab-israel-russia-hacking.html\">Kaspersky Lab<\/a> and <a href=\"https:\/\/www.wired.com\/2011\/08\/how-rsa-got-hacked\/\" data-type=\"URL\" data-id=\"https:\/\/www.wired.com\/2011\/08\/how-rsa-got-hacked\/\">RSA <\/a>all have experienced breaches.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.fbi.gov\/about\/leadership-and-structure\/fbi-executives\/gorham\" data-type=\"URL\" data-id=\"https:\/\/www.fbi.gov\/about\/leadership-and-structure\/fbi-executives\/gorham\">Matt Gorham<\/a>, assistant director of the FBI\u2019s cyber division, <a href=\"https:\/\/www.washingtonpost.com\/national-security\/leading-cybersecurity-firm-fireeye-hacked\/2020\/12\/08\/a3369aaa-3988-11eb-98c4-25dc9f4987e8_story.html\" data-type=\"URL\" data-id=\"https:\/\/www.washingtonpost.com\/national-security\/leading-cybersecurity-firm-fireeye-hacked\/2020\/12\/08\/a3369aaa-3988-11eb-98c4-25dc9f4987e8_story.html\">said that<\/a> &#8220;preliminary indications show an actor with a high level of sophistication consistent with a nation-state.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/sais.jhu.edu\/users\/trid2\" data-type=\"URL\" data-id=\"https:\/\/sais.jhu.edu\/users\/trid2\">Thomas Rid<\/a>, a professor of strategic studies at Johns Hopkins University, <a href=\"https:\/\/www.wsj.com\/articles\/u-s-cyber-firm-fireeye-says-it-was-breached-by-nation-state-hackers-11607461408\" data-type=\"URL\" data-id=\"https:\/\/www.wsj.com\/articles\/u-s-cyber-firm-fireeye-says-it-was-breached-by-nation-state-hackers-11607461408\">told the Wall Street Journal that<\/a> &#8220;anybody who is going after the top bespoke cybersecurity companies that have threat-intelligence and incident-response capabilities has to be extremely confident and also slightly reckless at the same time. Because the chances that they get caught are high.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.washingtonpost.com\/national-security\/leading-cybersecurity-firm-fireeye-hacked\/2020\/12\/08\/a3369aaa-3988-11eb-98c4-25dc9f4987e8_story.html\">The Washington Post<\/a> reported that Russian intelligence hackers from a group known as APT 29 or Cozy Bear carried out the breach, but the investigation of verifying this is ongoing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mandia said that &#8220;these tools [that were stolen from FireEye] mimic the behavior of many cyberthreat actors and enable FireEye to provide essential diagnostic security services to our customers. None of the tools contain zero-day exploits. Consistent with our goal to protect the community, we are proactively releasing methods and means to detect the use of our stolen red team tools.&#8221;<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcyberhacking-even-security-pros-are-vulnerable%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>If a top cybersecurity company can be hacked, it should give you pause about the safety of your information online. Earlier this week FireEye&#8217;s CEO, Kevin Mandia, announced that their company had been hacked and some of the assessment tools<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/cyberhacking-even-security-pros-are-vulnerable\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-10591","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=10591"}],"version-history":[{"count":1,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10591\/revisions"}],"predecessor-version":[{"id":10592,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10591\/revisions\/10592"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=10591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=10591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=10591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}