ZDNet

NCC Group to audit OpenSSL for security holes

OpenSSL, arguably the world's most important Web security library with its support for Secure Sockets Layer (SSL) and Transport Layer Security (TLS) in such popular Web servers as Apache and Nginx, ...
ZDNet

Logjam OpenSSL security hole patched

OpenSSL, thanks to the help of the Linux Foundation's Core Infrastructure Initiative (CII) and the NCC Group, is finally getting ahead of its security problems. OpenSSL, perhaps the world's most ...
TechCrunch

Massive Security Bug In OpenSSL Could Affect A Huge Chunk Of The Internet

I saw a t-shirt one time. “I’m a bomb disposal technician,” it read. “If you see me running, try to keep up.” The same sort of idea can be applied to net security: when all the net security people you ...
Datacenter Dynamics

OpenSSL updates software to address security vulnerabilities

The OpenSSL Project yesterday released updates to four versions of its SSL implementation software that will patch 14 vulnerabilities. Two of the vulnerabilities had their severity rated as “high”, ...
Time

Another Serious Security Breach Revealed Weeks After Heartbleed

A new security bug in OpenSSL encryption was revealed and patched Thursday, just a few months after Heartbleed threatened hundreds of thousands of secure web servers. The new bug is the most serious ...
The Next Web

OpenSSL has a critical security vulnerability that needs to be patched right away

The OpenSSL project has just disclosed a devastating security flaw in the protocol that could expose the cryptographic keys and private communications from some of the most important sites and ...
Ars Technica

OpenSSL to get a security audit and two full-time developers

A Linux Foundation project inspired by the Heartbleed security flaw announced that it will fund a security audit for the OpenSSL code base and the salaries of two full-time developers. The Heartbleed ...
eWeek

Oracle Joins SafeLogic to Develop FIPS Module for OpenSSL Security

eSpeaks’ Corey Noles talks with Rob Israch, President of Tipalti, about what it means to lead with Global-First Finance and how companies can build scalable, compliant operations in an increasingly ...
Threat Post

OpenSSL to Patch Two Vulnerabilities This Week

OpenSSL announced that it will release updates for 1.0.2f and 1.0.1r that patch two high-severity vulnerabilities. OpenSSL is scheduled to update two versions of the software this week, patching a ...
Threat Post

OpenSSL Security Audit Ready to Start

NCC Group Cryptography Services announced it will shortly begin an audit of OpenSSL. Funding from the Core Infrastructure Initiative has helped the maintainers of OpenSSL, one of the Internet’s ...
The Conversation

Six more bugs found in popular OpenSSL security tool

Robert Merkel has received funding from Australian Research Council Discovery Projects on the topic of software testing and reliability. Computer system administrators around the world are groaning ...