Unspecified vulnerability in ARM mbed TLS (CNVD-2021-59608)

ARM mbed TLS formerly PolarSSL is a product from ARM UK that provides secure communication and encryption capabilities for mbed products. A security vulnerability exists in ARM mbed TLS versions prior to 2.12.0, prior to 2.7.5, and prior to 2.1.14, which stems from an incorrect fix for the...

Government Surveillance Could Targeted Automated Updates

SAN FRANCISCO – As more Web-based services are encrypted, privacy advocates are concerned the next wave of aggressive surveillance activity could target automated update services that essentially provide Internet companies root access to machines. Chris Soghoian, principal technologist with the...