Whitelist Goes Black: Security Firm Bit9 Hacked

Bit9 acknowledged a breach of its corporate network that allowed unknown attackers to control an application code-signing server; malware signed by that server was subsequently identified on three of Bit9's customers. The company blamed lapses in its own internal security for the compromise, which may have ripple effects across its government, defense contractor, energy, retail, and financial services customers as more details emerge.