Security News

SSL Labs 1.17: RC4, Obsolete Crypto, and Logjam (Reddit)
2015-05-21 12:11

Use SSLsplit to transparently sniff TLS/SSL connections - including non-HTTP(S) protocols - Philipp's Tech Blog (Reddit)
2015-05-09 20:10

IETF updates TLS/SSL best practice guidance (The Register)
2015-05-07 01:10

MySQL Bug Can Strip SSL Protection From Connections (Threatpost)
2015-04-30 14:59

Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker to strip SSL/TLS connections of their security wrapping...

Firmware Update for Barracuda Web Filter Fixes SSL Inspection Flaws (SecurityWeek)
2015-04-30 10:20

Thousands of iOS apps left open to snooping thanks to SSL bug (ZDNet)
2015-04-27 18:48

Security Labs: SSL Labs RC4 Deprecation Plan (Reddit)
2015-04-24 13:02

IOS SSL parser crash bug, causes most apps to crash upon startup. (Page 12 is where it starts, whole thing is good though.) (Reddit)
2015-04-22 19:00

Renewed Attention on Android Apps Failing SSL Validation (Threatpost)
2015-04-22 00:12

CERT researcher Will Dormann presented an update on his research looking at Android apps that fail to validate SSL; Google meanwhile, says it will get stricter with enforcement.

Upatre malware gets full SSL comms encryption (Help Net Security)
2015-04-20 15:26

The extremely popular Upatre Trojan downloader has undergone considerable changes that will make it and its communication more difficult to spot and block. The changes were implemented in the new v...