For the nth time in the last couple of years, security experts are warning about a new Internet-scale vulnerability, this time in some popular SSL clients. The flaw allows an attacker to force clients to downgrade to weakened ciphers and break their supposedly encrypted communications through a man-in-the-middle attack. Researchers recently discovered that some SSL[…]
Latest posts
D-Link Working on Firmware Updates for Three Critical Bugs
Categories: Hacks, Vulnerabilities
D-Link is in the midst of pushing out firmware updates for eight of its home router models, addressing three serious remote code injection vulnerabilities.
Patrick Gray on the State of Security and State Security
Categories: Compliance, Podcasts
Worlds collide as Dennis Fisher talks with Patrick Gray of the Risky Business podcast about security journalism, how much and how little has changed in the industry in the last 15 years and whether we’re making any progress in the fight against attackers.
Firefox 37 to Include New OneCRL Certificate Blocklist
Categories: Vulnerabilities, Web Security
The next version of Mozilla Firefox will include a new certificate revocation list that will speed up and streamline the process of revoking intermediate certificates trusted by the browser. The new feature, known as OneCRL, is meant as a replacement for the old OCSP (online certificate status protocol) system that is used now to check[…]
Domain Shadowing Latest Angler Exploit Kit Evasion Technique
Categories: Hacks, Malware, Web Security
The Angler Exploit Kit has begun using domain shadowing as a technique to avoid detection and blocking, researchers at Cisco Talos said.
