Security powerhouse FireEye says it was breached by nation-state hackers

Enlarge (credit: Lino Mirgeler/picture alliance via Getty Images)

FireEye, a $3.5 billion company that helps customers respond to some of the world’s most sophisticated cyberattacks, has itself been hacked, most likely by a well-endowed nation-state that made off with potent “red-team” attack tools used to pierce network defenses.

The revelation, made in a press release posted after the close of stock markets on Tuesday, is a stunning development. It suggests that a group that was already capable of penetrating a company with FireEye’s security prowess and resources is now in possession of new exploits, backdoor implants, or other tools, making the hackers an even greater threat to organizations all over the world.

So far, the company has seen no evidence that the tools are actively being used in the wild and isn’t sure if the attackers plan to use them. Nonetheless, FireEye said it is releasing more than 300 countermeasures that customers can use to protect themselves in the event that the tools are used. Such tools are used by so-called red teams, which mimic malicious hackers in training exercises that simulate real-world hack attacks.

Read 5 remaining paragraphs | Comments

from Tech – Ars Technica https://ift.tt/3goFOEW