Collaborate Disseminate
While 1.7 million of the certificates potentially affected by a CAA bug have already been replaced, around 1 million are still active. Continue reading Let’s Encrypt Pushes Back Deadline to Revoke Some TLS Certificates
On Wednesday millions of Transport Layer Security certificates will be revoked because of a Certificate Authority Authorization bug. Continue reading Let’s Encrypt to Revoke Millions of TLS Certs
TLS 1.3 is nearly upon us, and with it comes a more secure way to do business online. We look at some of the changes coming into force soon.
Categories:
Security world
Technology
Tags: internetonlineTLSTLS 1.3transport layer security
Researchers have found a new covert data exchange technique that abuses the TLS protocol that can circumvent traditional network perimeter protections. Continue reading Covert Data Channel in TLS Dodges Network Perimeter Protection
Researchers have found a new covert data exchange technique that abuses the TLS protocol that can circumvent traditional network perimeter protections. Continue reading Covert Data Channel in TLS Dodges Network Perimeter Protection
New research shows how an old vulnerability called ROBOT can be exploited using an adaptive chosen-ciphertext attack to reveal the plaintext for a given TLS session. Continue reading 19-Year-Old TLS Vulnerability Weakens Modern Website Crypto
Using a free tool called Spinner, researchers identified certificate pinning vulnerabilities in mobile banking apps that left customers vulnerable to man-in-the-middle attacks. Continue reading Banking Apps Found Vulnerable to MITM Attacks
Researchers have found a variant of Ursnif Trojan they said is a “v3 build” that targets Australian bank customers with new redirection attack techniques. Continue reading Ursnif Trojan Adopts New Code Injection Technique
Chrome to immediately stop recognizing EV status and gradually nullify all certs. Continue reading Google takes Symantec to the woodshed for mis-issuing 30,000 HTTPS certs [updated]
US-CERT issues alert to server admins warning of a dangerous OpenSSL vulnerability and urges 1.1.0 users update to version 1.1.0e. Continue reading OpenSSL Update Fixes High-Severity DoS Vulnerability