Browsing tag

Heartbleed

Change.org sends password reset email after CloudBleed bug

Change.org, a famous online petition website is sending emails to its registered petitioners encouraging them to change their account password on the website. The email came days after Google employee, Tavis Ormandy of Project Zero exposed Cloudbleed bug that seems to have leaked sensitive and personal information passing through websites using CloudFlare’s service. The email […]

New Ticketbleed Vulnerability Bleeds Like Old Heartbleed.. Literally

Filippo Valsorda, a researcher from Cloudflare, recently discovered a bug in F5’s BIG-IP Networks. The flaw has been dubbed as Ticketbleed, keeping in mind its similarity with another such bug, Heartbleed. How does Ticketbleed work? Ticketbleed is a vulnerability in the BIG-IP SSL networks that allows for SSL sessions to be leaked which are as large as 31 bytes. This happens due to the […]

How to Scan for Heartbleed bug using Nmap on Kali Linux

In this tutorial we will be scanning a target for the well known Heartbleed SSL Bug using the popular Nmap tool on Kali Linux. The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library and was introduced on 31 December on 2011 and released in March 2012. This weakness allows the attacker to steal information […]

Hackers breach Yahoo! servers through Bash Bug

Romanian hackers used Bash Bug flaw to hackYahoo servers, according to a recent security news update. Jonathan Hall, President of the IT consulting firm, Future South Technologies and a security researcher, has affirmed that a group of Romanian hackers used the Shellshock vulnerability to compromise Yahoo servers, which was also confirmed by Yahoo! Hall said […]

Shellshock Bash Bug Leaves Almost Every User on The Internet Vulnerable

They call it Shellshock bug, they say it is way more dangerous than the previous Heartbleed bug which left all the secure SSL system vulnerable, but this bug has power to compromise any system and run commands to install malicious softwares on your device or computer. Hackers may already be accessing people’s personal data by exploiting […]

Use LastPass checker to find sites vulnerable to ‘Heartbleed’ and if you’ve to change your password

The password manager, LastPass, allows you to check if the saved sites are affected by the bug through its ‘LastPass Heratbleed Checker. LastPass’s Security Check tells you which sites have updated their certificates, and whether you need to change your password for that site. Image credit: Cnet In the latest attempt to safeguard against the openSSL programming […]