Security

A Skeleton Key of Unknown Strength

Very detailed article from Dan Kaminsky who is a well-known security researcher, black hat speaker and has special interests in DNS security. This article discusses the recent glibc vulnerability (CVE-2015-7547) and some of the possible attack vectors including mitigation strategies. I particularly share the view in the last couple of paragraphs where Dan talks about the importance on how we as […]

A Skeleton Key of Unknown Strength Read More »

MS14-066 – Critical – Vulnerability in Schannel Could Allow Remote Code Execution (KB 2992611)

Microsoft has published a critical update to the Schannel component in all versions of Windows. Reports are suggesting this vulnerability is on the same scale as Heartbleed and Shellshock vulnerabilities that effected open-source platforms earlier this year. This security update resolves a privately reported vulnerability in the Microsoft Secure Channel (Schannel) security package in Windows. The vulnerability

MS14-066 – Critical – Vulnerability in Schannel Could Allow Remote Code Execution (KB 2992611) Read More »

Scroll to Top