A major new vulnerability could expose your encrypted emails

Nobody wants snoops peeking at their emails. Unfortunately, the newly discovered "Efail" vulnerability could make that a possibility. 

On Monday morning, the Electronic Frontier Foundation (EFF) reported that Efail is able to expose HTML emails encrypted with PGP and S/MIME encryption programs — even those that were sent years ago. These tools are commonly employed by journalists, politicians, and other users who require secure communication. 

"In a nutshell, Efail abuses active content of HTML emails, for example externally loaded images or styles, to exfiltrate plaintext through requested URLs," the researchers write.  Read more...