CVE-2016-10099: Undefined Security Weakness

Borg aka BorgBackup before 1.0.9 has a flaw in the cryptographic protocol used to authenticate the manifest list of archives, potentially allowing an attacker to spoof the list of archives...

Mozilla Turning TLS 1.3 On By Default With Firefox 52

When Mozilla ships Firefox 52, on or around March 7, 2017, the browser will come with the cryptographic protocol TLS 1.3 on by default. Martin Thomson, a principle engineer at Mozilla broke the news Wednesday in an email to Mozilla Development Platform members. “TLS 1.3 removes old and unsafe...

Transport Layer Security (TLS) Version 1.2

Transport Layer Security TLS is a cryptographic protocol meant to provide security and data integrity for communications over TCP/IP networks. This protection will detect and block any use of TLSv1.2 protocol...

Transport Layer Security (TLS) Version 1.0

Transport Layer Security TLS is a cryptographic protocol meant to provide security and data integrity for communications over TCP/IP networks. TLSv1.0 is considered obsolete and insecure, and is deprecated in favor of a more advanced TLS protocol. This protection will detect and block any use of...

Transport Layer Security (TLS) Version 1.1

Transport Layer Security TLS is a cryptographic protocol meant to provide security and data integrity for communications over TCP/IP networks. TLSv1.1 is considered obsolete and insecure, and is deprecated in favor of a more advanced TLS protocol. This protection will detect and block any use of...

The vulnerability of the ScreenOS operating system allows a hacker to decode messages.

The vulnerability of the ScreenOS operating system is related to the implementation of a cryptographic protocol. Exploiting this vulnerability allows a malicious actor to decrypt messages transmitted during a VPN session by analyzing network traffic...

The vulnerability of the ScreenOS operating system allows a hacker to decode messages.

The vulnerability of the ScreenOS operating system is related to the implementation of a cryptographic protocol. Exploiting this vulnerability allows a malicious actor to decrypt messages transmitted during a VPN session by analyzing network traffic...

OpenSSL to Patch High Severity Vulnerability this Week

The OpenSSL Foundation is set to release a handful of patches for undisclosed security vulnerabilities in its widely used open source software later this week, including one that has been rated "high" severity. In a mailing list note published last night, Matt Caswell of the OpenSSL Project Team...

Two Cisco Products Vulnerable to POODLE Attack on TLS

Two of Cisco’s products are vulnerable to the POODLE attack via the TLS implementation in those products. The vulnerability affects Cisco’s Adaptive Security Appliance software and its Application Control Engine module. The POODLE attack was disclosed in October by researchers from Google, who...

Secure Sockets Layer (SSL) Version 2.0 (CVE-2016-0703; CVE-2016-0704; CVE-2016-0800)

Secure Socket Layer SSL is a cryptographic protocol meant to provide security and data integrity for communications over TCP/IP networks. This protocol is considered obsolete and insecure, and is deprecated in favor of the more advanced TLS protocol. This protection will detect and block any use ...

SSH Protocol Version 1 Session Key Retrieval

The remote SSH daemon supports connections made using the version 1.33 and/or 1.5 of the SSH protocol. These protocols are not completely cryptographically safe so they should not be used. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10882; scriptversion"1.37";...