Iranian Hackers Claim They Compromised NASA SSL Digital Certificate

[InfoSec News <alerts () infosecnews org>]

http://www.darkreading.com/security-monitoring/167901086/security/attacks-breaches/240000784/iranian-hackers-claim-they-compromised-nasa-ssl-digital-certificate.html

By Kelly Jackson Higgins
Dark Reading
May 21, 2012

A self-professed Iranian hacker gang announced in an online post that it 
compromised an SSL certificate belonging to NASA and subsequently 
accessed information on "thousands" of NASA researchers.

Word of the alleged hack by the Iranian Cyber Warriors Team was first 
reported last week by SecurityWeek, which said NASA confirmed that its 
security office was "investigating the claim."

A NASA spokesperson had not responded as of this posting to a press 
inquiry by Dark Reading on the status of the investigation.

But security experts say the hackers' claims could well be true. "[It 
is] absolutely possible. It was an Iranian hacker who took down 
DigiNotar last August. And NASA has received lots of negative GAO 
comments on [its] cyber" security, says Jeffrey Carr, CEO of Taia 
Global.

[...]


_______________________________________________
LayerOne Security Conference
May 26-27, Clarion Hotel, Anaheim, CA
http://www.layerone.org