An Interest In:
Web News this Week
- March 31, 2024
- March 30, 2024
- March 29, 2024
- March 28, 2024
- March 27, 2024
- March 26, 2024
- March 25, 2024
Some of Our Sources
- BoingBoing
- Techcrunch
- Technology Review
- Spoon Graphics
- TutsPlus - Design
- You The Designer
- My Ink Blog
- Freelance Switch
- Willems Lab
- Daily Now
Help Webnuz
Referal links:
January 16, 2020 04:10 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/hsOs7Ncg2_M/proof-of-concept-exploits-published-for-the-microsoft-nsa-crypto-bug
Proof-of-Concept Exploits Published for the Microsoft-NSA Crypto Bug
Security researchers have published proof-of-concept (PoC) code for exploiting a recently-patched vulnerability in the Windows operating system, a vulnerability that has been reported to Microsoft by the US National Security Agency (NSA). From a report: The bug, which some have started calling CurveBall, impacts CryptoAPI (Crypt32.dll), the component that handles cryptographic operations in the Windows OS. According to a high-level technical analysis of the bug from cyber-security researcher Tal Be'ery, "the root cause of this vulnerability is a flawed implementation of the Elliptic Curve Cryptography (ECC) within Microsoft's code." According to both the NSA, the DHS, and Microsoft, when exploited, this bug (tracked as CVE-2020-0601) can allow an attacker to: 1. Launch MitM (man-in-the-middle) attacks and intercept and fake HTTPS connections. 2. Fake signatures for files and emails. 3. Fake signed-executable code launched inside Windows.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/hsOs7Ncg2_M/proof-of-concept-exploits-published-for-the-microsoft-nsa-crypto-bug
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot