tls

The world of cybersecurity is perpetually on alert, facing an unending procession of new threats that demand fresh defensive measures. However, a new frontier has started to crystallize on the horizon—one that many researchers and technology leaders now call the next great battle in...

The world of cybersecurity is undergoing a tectonic shift as the relentless march of quantum computing edges ever closer to practical realization. For decades, the bedrock of digital security—cryptography—has relied on mathematical problems that are infeasible for classical computers to solve...

In the realm of online security, consistent advancements are essential to enhance the protection of digital interactions and safeguard sensitive information. An integral aspect of this security landscape involves Transport Layer Security (TLS) server authentication. Recently, Microsoft announced...

Describes the LdapEnforceChannelBinding registry setting that is used to enable the fix decribed in CVE-2017-8563 Continue reading...

Hi, I have suddenly started getting issues with websites (eg a failure to connect to Sage Pay from a shopping site) - Chrome and Edge browsers. I believe I am up to date with Windows 10 updates and Chrome is right up to date version, just reinstalled to be sure. eg -I tried accessing PC World...

Hello! This is gonna be an odd post in this section, considering that my problems are unrelated to server usage altogether, but maybe someone can help me out here. I got a copy of Windows Server 2008 R2 from the Dreamspark program years ago by attending college. I decided I wanted to use this...

Original release date: March 16, 2017 Systems Affected All systems behind a hypertext transfer protocol secure (HTTPS) interception product are potentially affected. Overview Many organizations use HTTPS interception products for several purposes, including detecting malware that uses HTTPS...

Today, a group of eight researchers from across the security industry released a research report on SHA-1 that demonstrates for the first time, a “hash collision” for the full SHA-1 hash algorithm (called “SHAttered”). This is a significant step toward understanding this type of security issue...

Link Removed

In September 2015, Microsoft announced the end-of-support for the RC4 cipher in Microsoft Edge and Internet Explorer 11 in 2016, as there is consensus across the industry that RC4 is no longer cryptographically secure. Today, we are releasing KB3151631 with the August 9, 2016 cumulative updates...

I created this reg file to disable SSLv2, v3 and TLS 1.0 as well as disabling weak encryption cipher suites.

Revision Note: V1.0 (May 10, 2016): Advisory published. Summary: FalseStart allows the TLS client to send application data before receiving and verifying the server Finished message. This allows an attacker to launch a man-in-the-middle (MiTM) attack to force the TLS client to encrypt the first...

Continue reading...

Revision Note: V1.0 (May 10, 2016): Advisory published. Summary: FalseStart allows the TLS client to send application data before receiving and verifying the server Finished message. This allows an attacker to launch a man-in-the-middle (MiTM) attack to force the TLS client to encrypt the first...

I hope I don't come across as horibly spammy on my third post here but I would like to share some info on a project that I've been working on. I know when it comes to free monitoring solutions we're all basically stuck with Nagios or some sort of Linux based product that is typically ugly and...

Revision Note: V1.0 (January 12, 2016): Advisory published. Summary: Microsoft is announcing the availability of an update to improve interoperability between Schannel-based TLS clients and 3rd-party TLS servers that enable RFC5077-based resumption and that send the NewSessionTicket message in...

Revision Note: V1.0 (December 8, 2015): Advisory published. Summary: Microsoft is aware of an SSL/TLS digital certificate for *.xboxlive.com for which the private keys were inadvertently disclosed. The certificate could be used in attempts to perform man-in-the-middle attacks. It cannot be used...

Revision Note: V1.0 (December 8, 2015): Advisory published. Summary: Microsoft is aware of an SSL/TLS digital certificate for *.xboxlive.com for which the private keys were inadvertently disclosed. The certificate could be used in attempts to perform man-in-the-middle attacks. It cannot be used...

Today, Microsoft is announcing the end-of-support of the RC4 cipher in Microsoft Edge and Internet Explorer 11. Starting in early 2016, the RC4 cipher will be disabled by-default and will not be used during TLS fallback negotiations. There is consensus across the industry that RC4 is no longer...

In February, we Link Removed the first preview of HTTP Strict Transport Security in Internet Explorer 11 in the Windows 10 Insider Preview. The HTTP Strict Transport Security (HSTS) policy protects against variants of man-in-the-middle attacks that can strip TLS out of communications with a...