Navigation section
client systems
About this tag
Discussions tagged with client systems cover security vulnerabilities affecting Windows and other platforms, including the FREAK attack and HTTPS interception risks. The FREAK vulnerability allows attackers to downgrade encrypted SSL/TLS sessions on client systems, forcing weaker ciphers. HTTPS interception products, while used for malware detection, can weaken TLS security if not properly implemented. These threads focus on the security implications for client systems, particularly in enterprise environments where HTTPS inspection is common. The content emphasizes the need for risk assessment and correct configuration of security products to protect client systems from downgrade attacks and other TLS-related threats.
-
TA17-075A: HTTPS Interception Weakens TLS Security
Original release date: March 16, 2017 Systems Affected All systems behind a hypertext transfer protocol secure (HTTPS) interception product are potentially affected. Overview Many organizations use HTTPS interception products for several purposes, including detecting malware that uses HTTPS...- News
- Thread
- best practices certificate client systems cybersecurity encryption https interception internet protocol malware mitm network security regulatory compliance risk assessment security security risks ssl technology tls validation web traffic
- Replies: 0
- Forum: Security Alerts
-
Microsoft confirms FREAK vulnerability affects Windows as well
Ref: http://www.winbeta.org/news/microsoft-confirms-freak-vulnerability-affects-windows-well If you pop onto the site above it will check whether your browser is vulnerable to attack. Apparently the latest Chrome is fine as is IE (version 11.0.9800.0. the one that comes with win 10 build 9926)- kemical
- Thread
- attack browser build chrome cipher client systems encryption exploit freak internet explorer microsoft rsa schannel security ssl tls update version vulnerability windows
- Replies: 0
- Forum: Windows Security