Did you even read the article? 1) The file was uploaded manually by a security researcher. 2) They couldn't access a particular part of LM/NG protected by Sec

Did you even read the article? 1) The file was uploaded manually by a security researcher. 2) They couldn't access a particular part of LM/NG protected by SecurID. They could've sent them an email also, they just wouldn't have gotten access to the information they needed. I'm sure RSA is using SecurID also, but someone somewhere fucked up and the attacker was able to find a security breach starting with the infected workstation. From there, it's easy to get personal info for social engineering, access network drives, etc. Look, if you have a determined, well funded country state hell-bent on cracking into your system, all the security in the world won't protect you.