InfoSec News

If generating a legacy certificate using the -t option, a vulnerability could be exploited by attackers to gain knowledge of sensitive information. If legacy certificates have been issued using OpenSSH version 5.6/5.7, consider rotating any CA key used. OpenSSH recommend upgrading to version 5.8 available here or apply this patch.


[1] http://www.openssh.com/txt/legacy-cert.adv
-----------
Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu (c) SANS Internet Storm Center. http://isc.sans.org Creative Commons Attribution-Noncommercial 3.0 United States License.
 
The extradition hearing for WikiLeak's founder Julian Assange is set to begin Monday in London, with his lawyers prepared to make arguments he could eventually end up in Guantanamo Bay if first extradited to Sweden.
 
The Egyptian uprising showed that you can't stop the Internet. Why? Because it's made out of people. Mike Elgan explains.
 
Federal authorities are investigating a computer intrusion at the company that runs the Nasdaq stock exchange, the Wall Street Journal reported Friday.
 


Internet Storm Center Infocon Status