Reuters has today revealed that internet giant VeriSign was hacked repeatedly during 2010.
VeriSign believes that the attacks did not breach the servers that support the firm’s Domain Name System (DNS) network, but has not ruled anything out.
Let us hope that VeriSign is right, as if the DNS network were breached it would potentially be bad news for many of the world’s websites – allowing cybercriminals to redirect users attempting to visit popular sites, and potentially infect surfers with malware and intercept communications.
According to a quarterly U.S. Securities and Exchange Commission filing made in October last year, but only highlighted by Reuters reporter Joseph Menn today, the company’s senior management team were not informed by their IT team about the security breaches until September 2011.
Here is the relevant section…
Read more in my article on the Naked Security website.
Found this article interesting? Follow Graham Cluley on Twitter or Mastodon to read more of the exclusive content we post.