Bit9 Defends Response To Hack, Promises More Details

Bit9 disclosed a breach of its internal network that allowed unknown attackers to sign malicious programs using a Bit9 code-signing server; those signed malware samples were later detected on the networks of three Bit9 customers. The company acknowledged it failed to follow its own best practices, is working with affected customers, and has promised to release more details while initially limiting public disclosure.