VeriSign admits it was hacked repeatedly in 2010, staff didn't tell senior management

[Jack]

Reuters has today revealed that internet giant VeriSign was hacked repeatedly during 2010.

VeriSign believes that the attacks did not breach the servers that support the firm's Domain Name System (DNS) network, but has not ruled anything out.

Let us hope that VeriSign is right, as if the DNS network were breached it would potentially be bad news for many of the world's websites - allowing cybercriminals to redirect users attempting to visit popular sites, and potentially infect surfers with malware and intercept communications.

According to a quarterly U.S. Securities and Exchange Commission filing made in October last year, but only highlighted by Reuters reporter Joseph Menn today, the company's senior management team were not informed by their IT team about the security breaches until September 2011.

Here is the relevant section of VeriSign's SEC filing:

Read more

 

[HeffeD]

Here is another article.
Key Internet operator VeriSign hit by hackers

Not sure what I think about this... Coming clean two years after the fact doesn't necessarily instill confidence in the running of VeriSign. Especially if the employees aren't informing the higher-ups about something as critical as this...