Oracle patches a critical bug in Java 15 and above, which lets attackers forge TLS certificates and signatures, two-factor authentication messages, and more (Dan Goodin/Ars Technica)

Dan Goodin / Ars Technica:
Oracle patches a critical bug in Java 15 and above, which lets attackers forge TLS certificates and signatures, two-factor authentication messages, and more  —  A failure to sanity check signatures for division-by-zero flaws makes forgeries easy.  —  Organizations using newer versions …



from Techmeme https://ift.tt/71Zk2jz
via IFTTT

Comments

Popular posts from this blog

6 investors discuss why AI is more than just a buzzword in biotech

Voiceflow, a Canada-based SaaS platform that lets companies launch their own voice and chat bots, raises $20M Series A led by Felicis Ventures (Igor Bosilkovski/Forbes)

Ex-staffers say Twitter's mass firing of security staff and growing reliance on automation will help China and other authoritarian regimes in silencing critics (Adam Rawnsley/Rolling Stone)