Security Firm Hacked
INCIDENT
Bit9, a security firm that provides software reputation, application control and whitelisting services suffered a breach that left three of its customers infected with malware.
“Due to an operational oversight within Bit9, we failed to install our own product on a handful of computers within our network. As a result, a malicious third party was able to illegally gain temporary access to one of our digital code-signing certificates that they then used to illegitimately sign malware,” said Bit9 Chief Executive Patrick Morley.
This was a supply chain attack.
