The fight for your privacy isn’t over yet, you might have to update your firewalls, routers, and servers too.
Heartbleed – OpenSSL Bug leaves Millions of Devices Vulnerable
The fight for your privacy isn’t over yet, you might have to update your firewalls, routers, and servers too.
Cisco Systems and other networking product manufacturing companies have announced that the Heartbleed bug — a flaw in OpenSSL that lets attackers bypass common security protocols — has been found in their networking products.
It is advised to those who are running their Devices with OpenSSL 1.0.1 through 1.0 to update to Open SSL 1.01g immediately or as soon as possible.
An extremely critical programming flaw in the OpenSSL was discovered, that apparently exposed the cryptographic keys and private data from some of the most important sites and services on the Internet.
The bug was independently discovered by security firm Codenomicon along with a Google Security engineer. The flaw is in the popular OpenSSL cryptographic software library and its weakness allows cyber criminals to steal the information protected, under normal conditions, by the SSL (Secure Sockets Layer) or TLS (Transport Security Layer) encryption used to secure the Internet.
OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library implements the basic cryptographic functions that enable SSL and TLS encryption. Almost every website uses either SSL or TLS, even the Apache web server that powers almost half of the websites over internet utilizes OpenSSL
Test your Device/Website for Bug:
http://filippo.io/Heartbleed
For more Details please visit :
http://www.heartbleed.com/
Cisco Advisory :
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed
Comments
No comment yet.