Millions at risk from ‘Freak’ encryption bug

  • March 20, 2015

Microsoft said it was working on a secure update to close the Freak loophole

Microsoft has issued a security warning about a bug that could let attackers spy on supposedly secure communications.

Called “Freak“, the bug was found in software used to encrypt data passing between web servers and web users.

Initially the flaw was thought only to affect some users of Android and Blackberry phones and Apple’s Safari web browser.

Microsoft’s warning suggests millions more may be at risk of losing data.

The Freak flaw was discovered by encryption and security expert Karthikeyan Bhargavan and lets attackers force data travelling between a vulnerable site and a visitor to use weak encryption. This makes it easier to crack open the data and steal sensitive information.

Statistics gathered by a group set up to monitor the impact of the Freak flaw suggest about 9.5% of the web’s top one million websites are susceptible to such attacks.

The monitoring group has also produced an online tool that lets people check if they are using a browser that is vulnerable to the flaw.

encrypted-800

Vulnerable
Apple is expected to produce a patch for the flaw next week and Google has updated its version of Chrome for the Mac to remove its susceptibility to Freak. It has yet to say what action it is taking with Android.

In a security advisory note released on 5 March, Microsoft said every current version of Windows that uses Internet Explorer, or any non-Microsoft software that calls on a part of Windows called Secure Channel, was vulnerable to the Freak flaw.

Microsoft has issued advice about ways to remove the vulnerability from some of its software but said applying these fixes could cause “serious problems” with other programs. It said it was working on a separate security update to remove the vulnerability.

In its advisory, Microsoft said it had not received any information that suggested the attack was being actively exploited by cybercriminals.

How To Make Homemade Fresh Mozzarella

Knowing how to make your own mozzarella is a dangerous thing. A fun, easy, and above all, tasty dangerous thing. Knowing how to make your own mozzarella is a dangerous…
Continue reading

Easy Way To Uninstall WordPress Multisite And Convert it To A Single WordPress Site

WordPress Multisite is a powerful solution for launching several websites off just one WordPress install. I have been struggling and squeezing my brain for months to find an easy simple way…
Continue reading

Understanding and treating an irritable bowel

Irritable bowel syndrome (IBS) is a disorder that interferes with the normal functions of the large intestine (colon). It is characterized by a group of symptoms-crampy abdominal pain, bloating, constipation,…
Continue reading

What Is Guarana? Benefits – Alternative Medecine

Guarana (Paullinia Cupana) Guarana popularity begins in Brasil Guarana is a plant named for the Guarani tribe in the Amazon, who used the seeds to brew…
Continue reading

4 Essential WordPress Plugins for Business Blogs

Whether you have a blog for your small business or blogging is your business, WordPress has a number of plugins that can help you maintain and grow your blog with…
Continue reading

Ginkgo Biloba Improves Memory and Brain Function

For thousands of years, leaves from the Ginkgo biloba tree have been a common treatment in Chinese medicine. In the U.S., many take ginkgo supplements in the belief that they…
Continue reading

What is a fully managed email marketing agency?

Some of the questions we are asked include: what exactly is an agency?; what does fully managed email marketing mean?; why would I use it when I have an IT…
Continue reading

These Blended Frozen Banana Recipes Are Better Than Ice Cream

It’s time to rethink the banana. All you need is a freezer and a blender to transform the potassium-, serotonin- and fiber rich fruit into the creamiest, most healthy treat…
Continue reading

CEO & founder of CNet Marketing, and is also the founder of a very successful international web hosting company "www.BabilooHost.com" has 14 years of experience in web services industry, a Leading Fully Managed Email Maketing Solutions "www.inteliMails.com" and Online Marketing Agency "www.CNetMarketing.com".

About us

We are dedicated people aiming to deliver important and valuable information and posts gathered from many sources around the web.