Zephyrnet Logo

Tag: openssl

OpenSSL fixes High Severity data-stealing bug – patch now!

by Paul Ducklin OpenSSL, probably the best-known if not the most widely-used encryption library in the world, has just release...

VMWare user? Worried about “ESXi ransomware”? Check your patches now!

by Paul Ducklin Cybersecurity news, in Europe at least, is currently dominated by stories about “VMWare ESXi ransomware” that is...

Serious Security: The Samba logon bug caused by outdated crypto

by Paul Ducklin Samba, simply put, is a super-useful, mega-popular, open-source reimplementation of the networking protocols used in Microsoft Windows,...

Get smarter search results with the Amazon Kendra Intelligent Ranking and OpenSearch plugin

If you’ve had the opportunity to build a search application for unstructured data (i.e., wiki, informational web sites, self-service help pages, internal documentation, etc.)...

Latest Firmware Flaws in Qualcomm Snapdragon Need Attention

A security company is leading coordinated vulnerability disclosure of multiple high-severity vulnerabilities in the Qualcomm Snapdragon chipset.The vulnerabilities were identified in the Unified Extensible...

Supply Chain Risks Got You Down? Keep Calm and Get Strategic!

The security industry collectively loses its mind when new vulnerabilities are discovered in software. OpenSSL is no exception, and two new vulnerabilities overwhelmed news...

How Naming Can Change the Game in Software Supply Chain Security

In many cases, once a high-risk security vulnerability has been identified in a product, a bigger challenge emerges: how to identify the affected component...

Where to Find the Best Open Source Security Technology

In the past decade or so, open source software has become a critical component of many companies' tech stacks. The proliferation of cloud computing...

S3 Ep110: Spotlight on cyberthreats – an expert speaks [Audio + Text]

by Paul Ducklin SPOTLIGHT ON CYBERTHREATS Security specialist John Shier tells you the “news you can really use” – how to...

This Week in Security: OpenSSL Fizzle, Java XML, and Nothing As It Seems

The security world held our collective breaths early this week for the big OpenSSL vulnerability announcement. Turns out it’s two separate issues, both related...

OpenSSL patches are out – CRITICAL bug downgraded to HIGH, but patch anyway!

by Paul Ducklin We’ll start with the important stuff: the widely awaited OpenSSL bugfixes announced last week are out. OpenSSL 1.1.1 goes to version 1.1.1s, and patches...

OpenSSL fixes two “one-liner” crypto bugs – what you need to know

by Paul Ducklin Just over a week ago, the newswires were abuzz with news of a potentially serious bug in the widely-used cryptographic library OpenSSL. Some headlines...

Latest Intelligence

spot_img
spot_img