Harry Sverdlove, CTO of security firm Bit9, says no organization — regardless of size or business — is immune to today’s attacks. Bit9 revealed details of how attackers had stolen one of its digital code-signing certificates and used it to sign malware attacks against three of its customers. “Obviously, everyone is a target. It’s not pleasant to talk about but [our breach] was a supply-chain attack,” he says. Attackers are constantly raising the bar, he says, and sharing intel they gather.”]
Source: https://www.darkreading.com/attacks-breaches/5-lessons-from-real-world-attacks