Security News

U.S. Government Wades Into Vulnerability Disclosure (Threatpost)
2015-07-10 14:57

Security researchers and software vendors have spent decades trying to work out the process of vulnerability disclosure, with limited success. Now the federal government is joining the fray in...

OpenSSL Patches Critical Certificate Validation Vulnerability (Threatpost)
2015-07-09 13:44

A high-severity bug in OpenSSL was disclosed today, and it affects only organizations that installed an update released in June, and allows anyone with an untrusted TLS certificate to become a CA.