A couple of days ago the Executive Chairman of RSA, Art Coviello, released an open letter to its customers talking vaguely of a compromise that has occurred within RSA. Coviello does not depict the events in a clear manner so customers cannot fully understand the scope of the activity, only stating “our security systems identified an extremely sophisticated cyber attack in progress” and also stated “investigation also revealed that the attack resulted in certain information being extracted from RSA’s systems”. As to what systems were accessed by the threat actors and what information was extracted remains a mystery. The only thing revealed by RSA is “certain information being extracted from RSA’s systems that relates to RSA’s SecurID two-factor authentication products”. Coviello does provide some comfort to his customers by stating “we are confident that the information extracted does not enable a successful direct attack”.