A high-severity bug in OpenSSL was disclosed today, and it affects only organizations that installed an update released in June, and allows anyone with an untrusted TLS certificate to become a CA.

eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. The open-source OpenSSL cryptographic library project came ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Kenneth Harris, a NASA veteran who worked on ...

OpenSSL has released a security update to address a vulnerability in the library that, if exploited, activates an infinite loop function and leads to denial of service conditions. Denial of service ...

The openSSL heartbleed has led to a huge increase in the number of SSL certificates being revoked, as site owners and hosting providers go through the process of replacing vulnerable certificates. The ...

Last night, I decided to up the ante and "upgrade" my perfectly working self-signed self-issued SSL certificate from valid for 365 days and (default RSA?) 1024-bit to valid for 4096 days and RSA ...

Lightship Security, an Applus+ Laboratories company and accredited cryptographic security test laboratory, and the OpenSSL ...

Akamai Technologies, whose network handles up to 30 percent of all Internet traffic, said Sunday a researcher found a fault in custom code that the company thought shielded most of its customers from ...