In most situations, the news that a group of Russian hackers broke through the security of two major websites and downloaded massive user databases would cause significant panic. Most users, ambivalent about online security best practices, will reuse user names and passwords tied to their email accounts, meaning that a user database could be a…
Computer security specialists and IT managers the world over have been racing to implement emergency fixes today for the “Heartbleed” security flaw in the popular OpenSSL cryptographic software library. The bug allows an attacker to gather data in 64 kilobyte blocks, slowly gathering a wealth of theoretically encrypted data. Although the most likely targets of…
A new version of malware worm is causing headaches for Linux users across the internet. Last year, Symantec identified a PHP-exploiting worm called “Linux.Darlloz” which was popping up on non-PC Linux devices like routers and security cameras. The worm was a security specialist’s nightmare, but most vulnerable devices could be easily patched with a simple…
During a recent audit of the cryptographic program GnuTLS, Red Hat analysts discovered a “critical” bug that would allow attackers to bypass secure sockets layer (SSL) and Transport Layer Security (TLS) protections. The flaw in the GnuTLS library allows attackers to eavesdrop on encrypted traffic, opening up the potential for stolen passwords and more damaging…