Sean Michael Kerner

On March 3, news first broke about the Factoring attack on RSA-EXPORT Keys (FREAK) attack against Secure Sockets Layer (SSL) and Transport Layer Security (TLS) encryption. Two weeks after that initial disclosure, security firm FireEye has found that both Apple iOS and Google Android apps are still at risk. FREAK, also identified as CVE-2015-0204, is […]

Millions of Americans are at risk today due to a newly disclosed data breach at health insurance provider Premera. The Premera breach—reported to affect up to 11 million people—involves multiple brands, including Premera Blue Cross, Premera Blue Cross Blue Shield of Alaska, and the affiliate brands Vivacity and Connexion Insurance Solutions. Premera also owns and […]

GlobalSign is building up its identity and access management (IAM) portfolio with a new IAM-Easy product offering. GlobalSign, perhaps best known as a Secure Sockets Layer/Transport Layer Security (SSL/TLS) Certificate Authority (CA), has expanded in recent months. In September 2014, GlobalSign acquired IAM software developer Ubisecure, where the roots of the IAM-Easy product are found. […]

Apple’s OS X operating system has multiple layers of security to protect users against potentially malicious applications, but according to Patrick Wardle, director of research at Synack, Dynamic Link Libraries (DLL) hijacking can be used to bypass those protections, potentially putting users at risk. Wardle is set to formally detail his research at a presentation […]

After 30 years, the dot-com (.com) top-level domain (TLD) continues to dominate the Internet, but now faces more challengers than ever. On March 15, 1985, the very first dot-com domain was registered by Symbolics, a now defunct technology vendor. The symbolics.com domain itself is still alive and is now owned by virtual real estate firm […]

As attacks continue to rise, security budgets are increasing, according to the 2015 Cyberthreat Defense Report (CDR), which is based on a survey of 814 security decision makers and practitioners. More than seven in 10 respondents (71 percent) noted that their networks were breached in 2014, up from 62 percent in last year’s study. The […]

Red Hat is pushing forward its efforts to bring Docker container applications into enterprise deployments by providing new programs that aim to help developers and partners build and deploy containerized applications. Red Hat was one of the first big vendors to back the open-source Docker container application virtualization effort, and started its initiative to enable […]

Cisco’s Talos research group reported March 12 that up to 282,867 Google Apps domains registered by eNom are at risk from a potential information leak. The information leakage is that domain owner names, addresses and phone numbers that were supposed to be protected with Whois privacy protection were not, in fact, protected. The way the […]

Many organizations think they are safe from attack, yet they still want to increase the size of their IT staffs, according to a report released March 11 by security specialist Trustwave. The study, based on a poll of 1,016 full-time IT professionals, found that 70 percent of respondents believed they were safe from cyber-attacks and […]

Docker Inc., the lead commercial sponsor behind the Docker open-source container application virtualization technology, today announced that it has acquired privately held Kitematic. Financial terms of the deal are not being publicly disclosed. Kitematic is an open-source project that enables users to easily deploy and run Docker containers on a desktop operating system. Although Kitematic […]

As the news surrounding former Secretary of State Hillary Clinton and her use of a private email server continues to swirl, security specialist Venafi offered its take on the situation. Venafi’s analysis is being accompanied by the 2015 Cost of Failed Trust Report, which provides broader insight into the state of Secure Sockets Layer/Transport Layer […]

Linux vendor SUSE today announced the general availability of its SUSE OpenStack Cloud 5 distribution, providing users with an updated infrastructure-as-a-service (IaaS) platform. The SUSE OpenStack Cloud product is a rebranding of the SUSE Cloud product that first entered the market in August 2012. “With the adoption of DefCore, the rules around the use of […]