GnuTLS Bug Exposes Shortcomings in TLS Test Suites
A code audit is the best way to throw back the covers on errors like the one reported last week in GnuTLS, an open source crypto library used in a number of different Linux distributions.
Michael Mimoso
Privacy Advocates Want To Halt Facebook Acquisition of WhatsApp
The Electronic Privacy Information Center and the Center for Digital Democracy filed a complaint with the Federal Trade Commission seeking to halt Facebook’s $19 billion acquisition of WhatsApp.
New Attacks on HTTPS Traffic Reveal Plenty About Your Web Surfing
Researchers at UC Berkeley have developed new attacks that analyze HTTPS traffic and can accurately determine what pages you’ve visited during an encrypted session.
Microsoft said it will patch a zero-day vulnerability in Internet Explorer 10 being exploited in watering hole attacks. The patch is one of five bulletins expected next Tuesday.
Researchers at Kaspersky Lab and Microsoft have shared new insight into how malware campaigns operate over the Tor anonymity network, as well as other darknets.
The GnuTLS bug is being joined at the hip to the recent Apple goto fail bug, but experts hoping to stem off confusion say the two vulnerabilities are different despite having the same consequences.
Security researchers have been investing in developing exploits for Microsoft’s Enhanced Mitigation Experience Toolkit (EMET), but hints are surfacing that hackers are taking notice too.
A critical vulnerability in GnuTLS, a popular open source crypto library, puts hundreds of software packages including popular Linux distribution at risk.
A team of researchers has published a paper that explains a number of attacks against websites and Web-based applications running TLS.
Verizon updated its transparency report, publishing data on FISA orders for customer content and account information.
