Collaborate Disseminate
US-CERT issues alert to server admins warning of a dangerous OpenSSL vulnerability and urges 1.1.0 users update to version 1.1.0e. Continue reading OpenSSL Update Fixes High-Severity DoS Vulnerability
US-CERT issues alert to server admins warning of a dangerous OpenSSL vulnerability and urges 1.1.0 users update to version 1.1.0e. Continue reading OpenSSL Update Fixes High-Severity DoS Vulnerability
76 apps in Apple’s App Store still don’t use best practices to protect user data. Continue reading Dozens of popular iOS apps vulnerable to intercept of TLS-protected data
Credit card data and personal information in the form of recorded telephone sales pitches and sales confirmations were leaked online by telemarketer. Continue reading Telemarketing Firm Leaks 400,000 Recorded Calls
Academics studying 283 Android VPN apps quantified a number of problems associated with native platform support for VPN clients through the BIND_VPN_SERVICE. Continue reading Many Android VPN Apps Breaking Privacy Promises
That’s it – I’m calling it – HTTPS adoption has now reached the moment of critical mass where it’s gathering enough momentum that it will very shortly become “the norm” rather than the exception it so frequently was in the past. In just the last few months, there’s been some
Continue reading HTTPS adoption has reached the tipping point
Google announced that it will operate its own root Certificate Authority, stood up by the acquisition of two root CAs from GlobalSign. Continue reading Google to Operate its Own Root CA
Google announced that it will operate its own root Certificate Authority, stood up by the acquisition of two root CAs from GlobalSign. Continue reading Google to Operate its Own Root CA
A bug in GoDaddy’s domain validation process forced the registrar to revoke SSL certificates and reissue certs for more than 6,000 customers. Continue reading Buggy Domain Validation Forces GoDaddy to Revoke Certs
On the iOS platform,the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS connections,which may allow an attacker to perform a man-in-the-middle(MITM)attack. Continue reading VU#767208: ThreatMetrix SDK for iOS fails to validate SSL certificates