2015년 3월 4일 수요일

Another serious security flaw found in the Web's encryption

TechBrief
March 04, 2015

FREAK is another serious security flaw in the Web's encryption

Experts are warning of a serious security flaw that has apparently gone undetected for years and can weaken encrypted connections between computers and websites, potentially undermining security across the Internet. The flaw, which has been dubbed FREAK, which stands for Factoring attack on RSA-EXPORT Keys, affects the widely used Secure Sockets Layer protocol and its successor, Transport Layer Security, and can allow an attacker to intercept supposedly encrypted traffic as it moves between clients and servers.
Also read: OpenSSL patches eight new vulnerabilities
And: Google releases tool to test apps, devices for SSL/TLS weaknesses
READ MORE
 

Issue highlights

White Paper: Damballa

Finding Advanced Threats Before They Strike

Enterprise security teams are on a high state of alert to keep up with ever-morphing advanced threats. This SANS Institute review shows how Damballa Failsafe can be the first and last line of defense. READ NOW

Google debunks reports of change to search rankings

Despite headlines popping up on the Internet, Google has no immediate plans to change the way it ranks its search results, giving more weight to facts instead of links. After Google researchers posted a paper last month on the site arXiv.org, an online archive of scientific research, rumors began spreading that Google was working on changing the way it ranks its search results.
Also read: Google tests business Hangouts in search results 
READ MORE

FCC a 'referee,' not a regulator, of the Internet, Wheeler says

FCC Chairman Tom Wheeler on Tuesday defended the commission's recent vote in support of Net neutrality, saying it isn't regulation as some critics contend it is, but instead sets up the Federal Communication Commission as a kind of referee. "If the Internet is the most powerful pervasive platform in the history of the planet, can it exist without a referee?" Wheeler said.
Also read: Net neutrality triumphs as ISPs weep
And: Net neutrality is as simple as freedom vs. monopoly 
READ MORE
Webcast: Damballa

Don’t Get Trumped by Advanced Threats

No one wants to be in the hot seat when it comes to enterprise security. 21st Television program host Donald Trump, Jr. interviews Dave Scholtz, CEO of Damballa, to discuss how the security landscape has changed and advice for today’s enterprise security teams when it comes to battling advanced threats.LEARN MORE

IBM plugs OpenPower servers into SoftLayer cloud

IBM will roll out a cloud computing service next quarter using OpenPower-based servers, continuing an effort to expand the market for Power processors and challenge Intel in hyperscale data centers.The company's SoftLayer division will provide an infrastructure-as-a-service offering using OpenPower systems in the second quarter, initially from a data center in Dallas, it said Wednesday.
Also read: With OpenPower, IBM tries to turn the tables on Intel 
READ MORE

Alibaba enters U.S. cloud market, signaling global ambitions

Chinese e-commerce giant Alibaba Group is making a push into the U.S. cloud computing market, where it's expected to run into competition from Amazon.com, Google, and Microsoft. Alibaba subsidiary Aliyun is already the biggest cloud player in its home market, and on Wednesday, it opened a data center in California, its first data center outside of China.
Also read: 10 lessons U.S. tech managers can learn from their counterparts in China 
READ MORE
White Paper: Damballa

Bot Detection is Integral to Security

Threat detection methods must evolve to keep up with cunning malicious actors. Popular technologies like sandboxing can miss advanced threats altogether. Learn how Damballa’s Failsafe can detect bot intention and nature to identify infections that bypass prevention controls. LEARN MORE

댓글 없음:

댓글 쓰기