https://malgregator.com/tags/ssl/ Recent content in SSL on malgregator Hugo -- gohugo.io en you@example.com you@example.com Thu, 30 Dec 2021 00:00:00 +0000 https://malgregator.com/post/automating-internal-certificate-issuance-with-acme-based-certificate-authority/ Thu, 30 Dec 2021 00:00:00 +0000 you@example.com https://malgregator.com/post/automating-internal-certificate-issuance-with-acme-based-certificate-authority/ Lessons learned from running Let's Encrypt Boulder certificate authority software in the company. https://malgregator.com/post/vault-authentication-with-yubikey/ Thu, 19 Mar 2020 00:00:00 +0000 you@example.com https://malgregator.com/post/vault-authentication-with-yubikey/ Leverage PKCS#11 support in curl to authenticate with the Vault's TLS Certificates Auth Method https://malgregator.com/post/week-3-2019/ Fri, 18 Jan 2019 08:30:00 +0000 you@example.com https://malgregator.com/post/week-3-2019/ 35-year-old vulnerability has been discovered in the SCP file transfer utility. According to the advisory impact section, 'Malicious scp server can write arbitrary files to scp target directory, change the target directory permissions and to spoof the client output.' https://malgregator.com/post/week-48-2018/ Fri, 30 Nov 2018 08:07:00 +0000 you@example.com https://malgregator.com/post/week-48-2018/ Sennheiser's HeadSetup software is installing a root certificate into the OS Trusted CA Certificate store. They have also put a private key on a device, the same one for all users, which allows any user to perform a man-in-the-middle SSL attacks against SSL communication. https://malgregator.com/post/week-32-2018/ Fri, 10 Aug 2018 07:31:00 +0000 you@example.com https://malgregator.com/post/week-32-2018/ A Comcast security flaws exposed more than 26 millions of customers’ personal information. Basically, an attacker could spoof IP address using 'X-forwarded-for' header on a Comcast login page and reveal the customer’s location. https://malgregator.com/post/week-27-2018/ Thu, 05 Jul 2018 11:28:00 +0000 you@example.com https://malgregator.com/post/week-27-2018/ Samsung Galaxy S9 and S9+ devices, maybe others, are texting camera photos to random contacts through the Samsung Messages app without user permission. https://malgregator.com/post/week-24-2018/ Fri, 15 Jun 2018 11:34:00 +0000 you@example.com https://malgregator.com/post/week-24-2018/ Yet another high severity attack against the Intel CPUs. Unpatched systems can leak SIMD, FP register state between privilege levels. These registers are used for private keys nowadays. The cost of a patch is more expensive context switches because the fix has to unload and reload all SIMD, FP state. https://malgregator.com/post/week-09-2018/ Fri, 02 Mar 2018 18:13:00 +0000 you@example.com https://malgregator.com/post/week-09-2018/ Wandera security researchers spotted a new sophisticated Android RedDrop malware hidden in at least 53 Android applications. It can intercept SMS, record audio and exfiltrate data to the remote server. https://malgregator.com/post/week-49-2017/ Thu, 14 Dec 2017 07:30:00 +0000 you@example.com https://malgregator.com/post/week-49-2017/ The 'Janus' Android vulnerability (CVE-2017-13156) allows attackers to modify the code in applications without affecting their signatures. The root of the problem is that a file can be a valid APK file and a valid DEX file at the same time. The vulnerability allows attackers to inject malware into legitimate application and avoiding detection.