Sean Michael Kerner

The integrity of Secure Sockets Layer (SSL) and Transport Layer Security (TLS) encryption is the focal point for a newly discovered vulnerability known as Factoring attack on RSA-EXPORT Keys, or FREAK, that could potentially enable attackers to decrypt secured data traffic. The FREAK vulnerability, also identified as CVE-2015-0204, is a cryptographic weakness that is triggered […]

Docker Inc., the lead commercial sponsor behind the popular open-source Docker application container virtualization technology, announced this morning that it is acquiring privately held software-defined networking (SDN) vendor SocketPlane. Financial terms of the deal are not being publicly disclosed. David Messina, Docker vice president of marketing, told eWEEK that the deal is an “acquihire,” or […]

The Software Assurance Marketplace (SWAMP) is an effort to help developers build more secure code by providing freely available tools to scan and audit code. SWAMP got its start in 2014 with support for C/C++ and Java and is now expanding to support Python code. SWAMP is funded by the Department of Homeland Security (DHS) […]

Mozilla is expanding its ecosystem of Firefox OS-powered phones with the help of partners KDDI, LG U+, Telefonica and Verizon, which are all working to build new classes of entry-level smartphones. Firefox OS is now set to power 17 different smartphones that are delivered in 40 different markets around the world. The effort to bring […]

Proofpoint today announced the acquisition of security intelligence vendor Emerging Threats for $40 million in cash and stock. Under the deal, Emerging Threats’ technology, including its open-source-based ETOpen rule set, will be integrated into Proofpoint’s threat-protection platform. “The team is very highly regarded within the security community, and we believe its database of network threat […]

Lookingglass Cyber Solutions’ acquisition of CloudShield Technologies is aimed at helping improve its dynamic threat intelligence platform capabilities. Financial terms of the deal, announced today, are not being disclosed publicly. “All of CloudShield’s engineering and the bulk of the employees have come over to Lookingglass,” Chris Coleman, Lookinglass CEO, told eWEEK. CloudShield’s deep packet processing […]

In February 2013, the largest SSL Certificate Authorities (CAs) in the world came together to create the Certificate Authority Security Council (CASC). Since then, the CASC—whose members include GoDaddy, Comodo, DigiCert, Symantec, GlobalSign, Trustwave, Entrust and Trend Micro—has continued to advance the state of certificate security. “We started out as an organization that was promoting […]

Fraud-prevention vendor Emailage today announced that it has raised $3.8 million in a Series A round of funding, which was led by Felicis Ventures. Emailage uses email addresses for user identity to help find potential fraud. The Emailage system is not an anti-spam platform, but rather it is an anti-fraud technology that can be leveraged […]

The open-source Docker container application virtualization technology is moving forward today with the availability of three new orchestration tools—Machine, Swarm and Compose—that were first announced at the DockerCon EU conference in December. Docker Machine is a technology that enables the Docker Engine—the application virtualization piece of Docker—to be quickly deployed on any server. Docker Swarm […]

The primary website for Lenovo was briefly redirected in the afternoon of Feb. 25, due to what appears to be a hack of the Domain Name Service (DNS) records for the lenovo.com Website. Lenovo did not respond to a request for comment from eWEEK before this story went live. The precise time of the DNS […]

Facebook’s security got a significant boost in 2014, thanks to the efforts of researchers who reported flaws to the social networking giant. Facebook reported the highlights of its bug-bounty program in a note posted on Feb. 25, revealing that $1.3 million awards were paid out to 321 researchers around the world in 2014. A Facebook […]

There continues to be a lack of proper Transport-Layer Security for mobile apps, according to Intel Security, which published a new report on Feb. 24. In September 2014, the Computer Emergency Response Team (CERT) at Carnegie Mellon University publicly identified a list of multiple mobile apps that had Secure Sockets Layer (SSL) issues. In January […]