“There’s a critical vulnerability in some versions of the widely used OpenSSL code library that in some cases allows attackers to impersonate cryptographically protected websites, e-mail servers, and virtual private networks, according to an advisory issued early Thursday morning. The bug allows attackers to force vulnerable end-user applications into treating an invalid certificate as a legitimate transport layer security (TLS) or secure sockets layer (SSL) credential. As a result, adversaries with the ability to monitor a connection between the end user and trusted server could intercept or even modify data passing between them.”
Related posts:
FBI “Communities Against Terrorism” Suspicious Activity Reporting Flyers
How an Ex-Cop Rigged McDonald’s Monopoly Game and Stole Millions
General Wesley Clark: Wars Were Planned - Seven Countries In Five Years
Mongolia's loosening of foreign investment restrictions 'a positive step'
The Relentless Market for “Saturday Night Specials”
Major Insider: The Vast Majority of Global Debt Will Be Defaulted On
Family Confronted With Armed Military Police After Leaving Museum
Obama Supporters Actually Hate Obama's Policies
Greek Perspective at Freedom Fest 2015
China Launches Frightening 'Social Credit' Game; Soon Mandatory
Mission KS Police Take Down, Cavity Search Mom In Front Of Children
The Countdown to the Nationalization of Retirement Savings
Obama called "war criminal" & "hypocrite of the century" in Irish Parliament
Company develops new fiber-reinforced wood, concrete ink for 3D printing
Firefox plug-in warns users of NSA surveillance