OpenSSL DSA Vulnerability – Daily Security Byte EP. 209

Last week, the OpenSSL team fixed a vulnerability that could allow attackers to get the key used to encrypt your HTTPS or SSL connections. Watch today’s video to learn a bit more about this vulnerability, the update, and how WatchGuard products are affected.

(Episode Runtime: 3:17)

Direct YouTube Link: https://www.youtube.com/watch?v=I8yBGcTGtqM

EPISODE REFERENCES:

• OpenSSL fixes a serious vulnerability related to DSA – Ars Technica
• Details on OpenSSL key recovery attack – Blogspot
• OpenSSL security advisory for update – OpenSSL
• WatchGuard’s knowledge base article on our exposure [Requires login] – WatchGuard

— Corey Nachreiner, CISSP (@SecAdept)