• Brian Burke-Gaffney
• Jan-07-2016
• Business Technology
•  Comments Off on Drupal sites at risk due to insecure update mechanism

The update mechanism of the popular Drupal content management system is insecure in several ways, allowing attackers to trick administrators into installing malicious updates.Researcher Fernando Arnaboldi from security firm IOActive noticed that Dru... Read More

• Brian Burke-Gaffney
• Jan-07-2016
• Business Technology
•  Comments Off on Drupal sites at risk due to insecure update mechanism

The update mechanism of the popular Drupal content management system is insecure in several ways, allowing attackers to trick administrators into installing malicious updates.Researcher Fernando Arnaboldi from security firm IOActive noticed that Dru... Read More

• Brian Burke-Gaffney
• Jan-07-2016
• Business Technology
•  Comments Off on Continued support for MD5 endangers widely used cryptographic protocols

The old and insecure MD5 hashing function hasn't been used to sign SSL/TLS server certificates in many years, but continues to be used in other parts of encrypted communications protocols, including TLS, therefore weakening their security.Researcher... Read More

• Brian Burke-Gaffney
• Jan-07-2016
• Business Technology
•  Comments Off on Continued support for MD5 endangers widely used cryptographic protocols

The old and insecure MD5 hashing function hasn't been used to sign SSL/TLS server certificates in many years, but continues to be used in other parts of encrypted communications protocols, including TLS, therefore weakening their security.Researcher... Read More