X-Industry

Yesterday, 21 October, the Internet was having a bad day, from a cybersecurity perspective. Government websites around the world went offline, Reuters reported, after AI discovered critical security vulnerabilities that impacted the programming language PHP.  The issues were severe enough that the US National Security Agency (NSA) advised organizations using PHP on their systems to either immediately update or take their systems offline until they could.[1]

But the PHP update wasn’t the only hea

A group of researchers has detailed a new timing vulnerability in Transport Layer Security (TLS) protocol that could potentially allow an attacker to break the encryption and read sensitive communication under specific conditions.  Dubbed "Raccoon Attack," the server-side attack exploits a side-channel in the cryptographic protocol (versions 1.2 and lower) to extract the shared secret key used for secure communications between two parties.

"The root cause for this side-channel is that the TLS st