One of the world’s leading cyber security companies was breached, likely through a state-sponsored attack. One of the side effects of this attack is that FireEye’s own red-team tools will now be effectively “useless” for pentesting.
FireEye was recently attacked by a nation-state adversary and here are the actions we are taking to protect the community.
…
Consistent with a nation-state cyber-espionage effort, the attacker primarily sought information related to certain government customers. While the attacker was able to access some of our internal systems, at this point in our investigation, we have seen no evidence that the attacker exfiltrated data from our primary systems that store customer information from our incident response or consulting engagements, or the metadata collected by our products in our dynamic threat intelligence systems. If we discover that customer information was taken, we will contact them directly.
Source: FireEye Shares Details of Recent Cyber Attack, Actions to Protect Community
Update (2020-12-10): FireEye shares (NASDAQ: FEYE) is down more than 13% after news broke.