“In 2011, Chinese spies stole the crown jewels of cybersecurity—stripping protections from firms and government agencies worldwide. Here’s how it happened….
The RSA breach, when it became public days later, would redefine the cybersecurity landscape. The company’s nightmare was a wake-up call not only for the information security industry—the worst-ever hack of a cybersecurity firm to date—but also a warning to the rest of the world. Timo Hirvonen, a researcher at security firm F-Secure, which published an outside analysis of the breach, saw it as a disturbing demonstration of the growing threat posed by a new class of state-sponsored hackers. ‘If a security company like RSA cannot protect itself,’ Hirvonen remembers thinking at the time, ‘how can the rest of the world?'”
-Andy Greenberg, “The Full Story of the Stunning RSA Hack Can Finally Be Told.” Wired. May 20, 2021.
Open Question: If a security company like RSA cannot protect itself from state sponsored hackers, who can? Also seems relevant given the recent SolarWinds hacks.