Vulnerabilities Archives

  1. A Skeleton Key of Unknown Strength

    Very detailed article from Dan Kaminsky who is a well-known security researcher, black hat speaker and has special interests in DNS security. This article discusses the recent glibc vulnerability (CVE-2015-7547) and some of the possible attack vectors including mitigation strategies. I particularly share the view in the last couple of paragraphs where Dan talks about the importance on how we as…

  2. MS14-066 – Critical – Vulnerability in Schannel Could Allow Remote Code Execution (KB 2992611)

    Microsoft has published a critical update to the Schannel component in all versions of Windows. Reports are suggesting this vulnerability is on the same scale as Heartbleed and Shellshock vulnerabilities that effected open-source platforms earlier this year. This security update resolves a privately reported vulnerability in the Microsoft Secure Channel (Schannel) security package in Windows. The vulnerability…

%d bloggers like this: