maravis.com

Attackers have breached the servers at RSA, the security company, and may have stolen information that could be used to compromise the company’s SecurID 2-factor authentication product line.

Web-hosting administration software maker InterWorx has been breached and hackers have stolen client credentials. What is worse is that they have used these credentials to get into their clients’ servers and modified them to distribute malware.

I wrote previously on MD5 hashing algorithm and how it is discouraged by PCI DSS. The PCI SSC (Security Standards Council) has now come out with a clarification on the use of MD5 for hashing.