Security News

EMCSSL: A brand new approach for network security, based on self-signed clients SSL certificates and cryptocurrency blockchain (Reddit)
2015-05-22 14:11

SSL Labs 1.17: RC4, Obsolete Crypto, and Logjam (Reddit)
2015-05-21 12:11

Use SSLsplit to transparently sniff TLS/SSL connections - including non-HTTP(S) protocols - Philipp's Tech Blog (Reddit)
2015-05-09 20:10

IETF updates TLS/SSL best practice guidance (The Register)
2015-05-07 01:10

MySQL Bug Can Strip SSL Protection From Connections (Threatpost)
2015-04-30 14:59

Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker to strip SSL/TLS connections of their security wrapping...

Firmware Update for Barracuda Web Filter Fixes SSL Inspection Flaws (SecurityWeek)
2015-04-30 10:20

Thousands of iOS apps left open to snooping thanks to SSL bug (ZDNet)
2015-04-27 18:48

Security Labs: SSL Labs RC4 Deprecation Plan (Reddit)
2015-04-24 13:02

IOS SSL parser crash bug, causes most apps to crash upon startup. (Page 12 is where it starts, whole thing is good though.) (Reddit)
2015-04-22 19:00

Renewed Attention on Android Apps Failing SSL Validation (Threatpost)
2015-04-22 00:12

CERT researcher Will Dormann presented an update on his research looking at Android apps that fail to validate SSL; Google meanwhile, says it will get stricter with enforcement.