GlobalSign releases security incident report.

Published: 2011-12-14
Last Updated: 2011-12-14 17:39:34 UTC
by donald smith (Version: 1)
3 comment(s)

GlobalSign released a press release today to address concerns that they may have had a compromise of their CA infrastructure.
http://www.globalsign.co.uk/company/press/121411-security-incident-report.html
They did a good job of stating what they did find and what they didn’t. They also address new measures put in place to improve their overall security posture.
“We didn't find any evidence of
*  Rogue Certificates issued.
*  Customer data exposed.
*  Compromised GlobalSign Root Certificate keys and associated Hardware Security Modules (HSM).
*  Compromised GlobalSign Certificate Authority (CA) infrastructure.
*  Compromised GlobalSign Issuing Authorities and associated HSMs.
*  Compromised GlobalSign Registration Authority (RA) services.

What did happen
*  Peripheral web server, not part of the Certificate issuance infrastructure, hosting a public facing web property was breached.
*  What could have been exposed? Publicly available HTML pages, publicly available PDFs, the SSL Certificate and key issued to www.globalsign.com.
*  SSL Certificate and key for www.globalsign.com were deemed compromised and revoked. “
 

Keywords:
3 comment(s)
ISC StormCast for Wednesday, December 14th 2011 http://isc.sans.edu/podcastdetail.html?id=2191

Comments


Diary Archives