Tuesday, April 15, 2014

Morning Security Brief: Heartbleed Wounds Millions of Web Sites, Ukraine Unrest Spreads, And More Apr 09, 2014

By Megan Gates
► Experts have discovered a major flaw in the security software OpenSSL, which is used by millions of Web sites—including banks, e-mail, and social media services. The flaw, known as Heartbleed, “exposes users’ names and passwords, the content of their communications, and their data to anyone who knows how to exploit the weakness,” The Washington Post reports. Many of the Web companies affected are already working to fix the problem, including Google, Amazon, and Yahoo. However, “experts are advising consumers not to rush out and change their passwords until the fix is complete” as further activity on a vulnerable site could “exacerbate the problem.” More than half a million Web sites are vulnerable to Heartbleed, or approximately two-thirds of the Internet, according to the Post.

► An explosion at a wholesale fruit market in the Pakistani capital of Islamabad has killed at least 20 people and wounded 50 more, according to The New York Times. Hospital and police officials are expecting the death toll to rise. “Police officials said that an initial investigation had determined that the explosives were placed in cartons of guava and were detonated by a remote-controlled device,” theTimes reports. No one has claimed responsibility for the attack and the Pakistani Taliban has also denied any involvement. Instead, the organization has called a cease-fire until tomorrow as it holds peace talks with the Pakistani government.
www.secuirtymanagement.com

No comments:

Post a Comment