They performed a SQL injection (SQLi) attack against the site and were able to extract more than 2,000 records containing names, usernames, passwords (plain text), emails, phone numbers, addresses and zip codes.

They also defaced the website with Guy Fawkes masks, which BART has yet to remove more than four hours later.

According to researchers from AppRiver the security company, they have spotted one fresh spam campaign which's trying to take advantage of the RSA Security's data hack into more than 40m SecureID Tokens that occurred during March 2011.

The fraudulent electronic mails pretend to be notices from RSA telling clients (e-mail recipients) that a dangerous security flaw has been found within one particular kind of the company's tokens. Thus they should click on a given web-link for verifying the safety of their own tokens, the e-mails continue.

Furthermore they state that in case any client's token is described unsafe then he is urged to take down and deploy a security update provided within another web-link.

Out-of-date browser plug-ins are prime targets for cyberattacks against enterprise browsers, according to Zscaler’s State of the Web report for the second quarter of 2011.

For example, Adobe Reader is installed in 83% of enterprise browsers, and 56% of those installations are out of date, according to the report, which is based on a review of enterprise web traffic flowing through Zscaler’s cloud-based web and email security product.

“That is a huge attack surface….This is really what the attackers are going after”, commented Michael Sutton, vice president of research at Zscaler ThreatLabZ.

The Blackhole exploit kit has picked up on this and includes a variety of payloads designed to target recent Adobe Reader vulnerabilities, the report noted.