ÃÛÌÒTV

News 03-27-2015

This Month in SSL: March 2015

Mark Santamaria

Here is our latest news roundup of articles about network and SSL security. to see the whole series.

SSL & Encryption News

  • NCC Group Cryptography Services along with the Linux Foundation will be conducting the first public security audit of . The audit is expected to take a few months, and the result should be published this summer.
  • Microsoft recently warned users of an .
  • On Google found that an intermediate CA under the Chinese registrar (CNNIC) had for several of Google’s domains.
  • Researchers at the University of London discovered that .

Data Security

  • New malware named uses memory scraping (a common point-of-sale Trojan technique) to exfiltrate payment card data from point-of-sale (PoS) terminals.
  • is gaining momentum. A recent report estimates that by 2019, 770 million biometric apps will be downloaded.
  • as an alternative to traditional primary passwords.

Vulnerabilities

  • In early March, the was discovered. The FREAK vulnerability affected Safari, Android OS, Internet Explorer, OpenSSL, and others.
  • A security audit revealed what was thought to be a .
  • Sites that use the because of a recently released tool called Reconnect.

Data Breaches

  • On March 17, health insurance provider announced that they had suffered a major data breach, exposing customer information. The breach affected 11 million customers.
  • After being contacted by law enforcement, (a point-of-sale provider), announced that they are investigating a possible data breach.
  • confirms that they suffered a data breach. The number of customers and which hotels were affected have not yet been disclosed.

Cybercrime

  • are being used by cybercriminals for Angler-type attacks.
  • A is being held ransom by a hacker.

Internet of Things

  • is testing a real-time warning system that would allow cars that encounter hazardous conditions on the road to relay the data to other vehicles in the area through a Volvo server.

Reports/White Papers

  • A recent report by showed that 80% of merchants around the world fail PCI compliance standards.
  • A recent study shows that there are .
UP NEXT
PKI

3 Surprising Uses of PKI in Big Companies and How to Ensure They Are all Secure

5 Min

Featured Stories

07-03-2024

What is a CA’s Role in delivering digital trust?

11-27-2024

6 actionable ways to secure the IIoT at every stage

Tracking the progress toward post-quantum cryptography

The state of PQC since the publication of FIPS 203, 204 and 205