Millions at risk from ‘Freak’ encryption bug

  • March 20, 2015

Microsoft said it was working on a secure update to close the Freak loophole

Microsoft has issued a security warning about a bug that could let attackers spy on supposedly secure communications.

Called “Freak“, the bug was found in software used to encrypt data passing between web servers and web users.

Initially the flaw was thought only to affect some users of Android and Blackberry phones and Apple’s Safari web browser.

Microsoft’s warning suggests millions more may be at risk of losing data.

The Freak flaw was discovered by encryption and security expert Karthikeyan Bhargavan and lets attackers force data travelling between a vulnerable site and a visitor to use weak encryption. This makes it easier to crack open the data and steal sensitive information.

Statistics gathered by a group set up to monitor the impact of the Freak flaw suggest about 9.5% of the web’s top one million websites are susceptible to such attacks.

The monitoring group has also produced an online tool that lets people check if they are using a browser that is vulnerable to the flaw.

encrypted-800

Vulnerable
Apple is expected to produce a patch for the flaw next week and Google has updated its version of Chrome for the Mac to remove its susceptibility to Freak. It has yet to say what action it is taking with Android.

In a security advisory note released on 5 March, Microsoft said every current version of Windows that uses Internet Explorer, or any non-Microsoft software that calls on a part of Windows called Secure Channel, was vulnerable to the Freak flaw.

Microsoft has issued advice about ways to remove the vulnerability from some of its software but said applying these fixes could cause “serious problems” with other programs. It said it was working on a separate security update to remove the vulnerability.

In its advisory, Microsoft said it had not received any information that suggested the attack was being actively exploited by cybercriminals.

What Experts Ought To Say About Drinking Cold Or Warm Water?

Water gives us life and we all know how good it feels to quench our thirst with a nice tall glass of cool water. But is cool water always the…
Continue reading

Common Google AdWords Mistakes and How to Avoid Them

It happens all too often. You get turned on to the wonders of advertising through Google AdWords, only to have a hastily organized campaign run up thousands of dollars worth…
Continue reading

3 Ways to Boost Your SEO for 2014

Last August, Google swooped in with Hummingbird, altering SEO as we know it with an entire re-write of the search algorithm. The new metrics made for the the company’s biggest SEO…
Continue reading

Amazing Benefits Of Cat’s Claw

Cat's Claw is a vine commonly known as Uña de Gato and is used traditionally in Peruvian medicine for the treatment of a wide range of health problems, particularly digestive…
Continue reading

Uses And Health Benefits Of Rosemary

Rosemary Benefits Rosemary was originally cultivated on the shores of the Mediterranean. In fact, the herb's Latin name, rosmarinus, is derived from the words "ros", which is translated to dew,…
Continue reading

15 Simple Yet Effective Email Marketing Tips

Before you get engaged in Marketing your business, products or services through email read these Email Marketing Tips. You should also know that some email service providers - ESP - allow…
Continue reading

7 Reasons Why List Posts Will Always Work

It’s a blogosphere favorite for good reason — “list” content works, in large part due to the attention-grabbing power of the headline. What may be news to some bloggers is…
Continue reading

Google now discounts all reciprocal links

For a long time, reciprocal links have remained at the forefront of most inbound linking strategies. This is going to have to change. Google now discounts all reciprocal links. The algorithm has…
Continue reading

CEO & founder of CNet Marketing, and is also the founder of a very successful international web hosting company "www.BabilooHost.com" has 14 years of experience in web services industry, a Leading Fully Managed Email Maketing Solutions "www.inteliMails.com" and Online Marketing Agency "www.CNetMarketing.com".

About us

We are dedicated people aiming to deliver important and valuable information and posts gathered from many sources around the web.