Millions at risk from ‘Freak’ encryption bug

  • March 20, 2015

Microsoft said it was working on a secure update to close the Freak loophole

Microsoft has issued a security warning about a bug that could let attackers spy on supposedly secure communications.

Called “Freak“, the bug was found in software used to encrypt data passing between web servers and web users.

Initially the flaw was thought only to affect some users of Android and Blackberry phones and Apple’s Safari web browser.

Microsoft’s warning suggests millions more may be at risk of losing data.

The Freak flaw was discovered by encryption and security expert Karthikeyan Bhargavan and lets attackers force data travelling between a vulnerable site and a visitor to use weak encryption. This makes it easier to crack open the data and steal sensitive information.

Statistics gathered by a group set up to monitor the impact of the Freak flaw suggest about 9.5% of the web’s top one million websites are susceptible to such attacks.

The monitoring group has also produced an online tool that lets people check if they are using a browser that is vulnerable to the flaw.

encrypted-800

Vulnerable
Apple is expected to produce a patch for the flaw next week and Google has updated its version of Chrome for the Mac to remove its susceptibility to Freak. It has yet to say what action it is taking with Android.

In a security advisory note released on 5 March, Microsoft said every current version of Windows that uses Internet Explorer, or any non-Microsoft software that calls on a part of Windows called Secure Channel, was vulnerable to the Freak flaw.

Microsoft has issued advice about ways to remove the vulnerability from some of its software but said applying these fixes could cause “serious problems” with other programs. It said it was working on a separate security update to remove the vulnerability.

In its advisory, Microsoft said it had not received any information that suggested the attack was being actively exploited by cybercriminals.

10 Sure-Fire Headline Formulas That Work

So, you’re seeing too many of those “how to” and list headlines, and want to try a few different angles? Let’s move beyond those common headline formulas you see over…
Continue reading

3 Alternatives to Using Google Adwords

For companies that want to advertise their brands and products online,Google Adwords is possibly the most popular tool, offering pay-per-click and site-targeted options across many types of ads. But if…
Continue reading

Strategic Use of Images in Search Engine Optimization

When assessing page structure and layout, there is a subtle, yet strategic way to use images in an SEO-friendly manner (beyond ALT tags) that improves your search rank while allowing you to integrate…
Continue reading

10 Ways to Boost Results Using Google AdWords

Google AdWords can drive large volumes of high-quality traffic. Small changes in a campaign often have a significant impact on its profitability. Here is a checklist of AdWords optimization techniques…
Continue reading

What is a fully managed email marketing agency?

Some of the questions we are asked include: what exactly is an agency?; what does fully managed email marketing mean?; why would I use it when I have an IT…
Continue reading

Uses And Health Benefits Of Peppermint

Peppermint (Mentha piperita) has been used medicinally for thousands of years. It has a pleasant taste and is a popular flavoring for food and drink. It is also used as…
Continue reading

Gum Problem Basics: Sore, Swollen, and Bleeding Gums

When you think about dental health, the focus is likely to be on preventing cavities in your teeth. But it's important to pay attention to your gums, too. Gums play…
Continue reading

Are There Dangers of Drinking Cold Water After Meals?

Some Eastern medicine practitioners believe drinking cold water after eating can cause digestive or immune system problems. However, some Western medical doctors believe drinking water after meals might be helpful.…
Continue reading

CEO & founder of CNet Marketing, and is also the founder of a very successful international web hosting company "www.BabilooHost.com" has 14 years of experience in web services industry, a Leading Fully Managed Email Maketing Solutions "www.inteliMails.com" and Online Marketing Agency "www.CNetMarketing.com".

About us

We are dedicated people aiming to deliver important and valuable information and posts gathered from many sources around the web.