2259 matches found
Google Outlines Plans to Deprecate RC4, SSLv3
As expected, Google formally announced its intent to move away from the stream cipher RC4 and the SSLv3 protocol this week, citing a long history of weaknesses in both. Adam Langley, a security engineer for the company, announced the plans through a blog post on Thursday. While there isn’t a...
Router devices do not implement sufficient UPnP authentication and security
Overview Home routers implementing the UPnP protocol do not sufficiently randomize UUIDs in UPnP control URLs, or implement other UPnP security measures. Description The UPnP protocol allows automatic device discovery and interaction with devices on a network. The UPnP protocol was originally...
How To Use WhatsApp Web Client on iPhone and Other iOS Devices
WhatsApp Web client support is now available for iOS users. That's right, now iOS users can access their instant messaging facility on the web; without taking the other route via jailbreaking. Eight months ago, on January 21, 2015, WhatsApp was made available on web browsers, and let Android,...
[SECURITY] Fedora 22 Update: icecast-2.4.2-1.fc22
Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...
[SECURITY] Fedora 21 Update: icecast-2.4.2-1.fc21
Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...
[SECURITY] Fedora 22 Update: firefox-40.0-4.fc22
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 21 Update: firefox-40.0-3.fc21
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 23 Update: firefox-39.0.3-1.fc23
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 21 Update: firefox-39.0.3-1.fc21
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Firefox temporarily shield the Flash, to avoid the user was hacked-vulnerability warning-the black bar safety net
! Hacking Team was attacked by hackers have been on the Adobe caused a serious impact. From Hacking Team leaks information that Adobe Flash Player there are two serious vulnerabilities. Since Adobe needs to spend some time to fix these vulnerabilities, so Mozilla decided for Firefox browser users...
[SECURITY] Fedora 21 Update: firefox-39.0-8.fc21
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 22 Update: firefox-39.0-8.fc22
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
What the PCI Council’s Point-to-Point-Encryption (P2PE) Update Means for You
Last week, the PCI Security Standards Council PCI SSC published the updated P2PE v2.0 standard. The Summary of Changes from v1.1 to v2.0, the updated P2PE Glossary and the PIM template are available in the PCI SSC documents library. According to the announcement, the highlights of the new version...
IETF Officially Deprecates SSLv3
Attacks such as POODLE and BEAST not only caused some sleepless nights for server admins having to patch against the respective weaknesses, but they also accelerated SSLV3 deprecation. In the time since both attacks were disclosed, major browsers have removed the fallback condition that enabled t...
NIST Drops Weak Dual_EC RNG From Official Recommendations
NIST officially has removed the controversial and compromised DualECDRBG from its list of recommended algorithms for generating random numbers. The DualEC random number generator was at the center of a controversy in the security community two years ago after revelations that the National Securit...
[SECURITY] Fedora 20 Update: openslp-1.2.1-22.fc20
Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...
[SECURITY] Fedora 22 Update: firefox-38.0-4.fc22
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
LogJam — This New Encryption Glitch Puts Internet Users at Risk
After HeartBleed, POODLE and FREAK encryption flaws, a new encryption attack has been emerged over the Internet that allows attackers to read and modify the sensitive data passing through encrypted connections, potentially affecting hundreds of thousands of HTTPS-protected sites, mail servers, an...