![\"new_attack_puts_websites__124163_227832\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2016\/03\/new_attack_puts_websites__124163_227832.jpg\")
Remember last year\u2019s \u201cHeartbleed\u201d scare? If you don\u2019t, or if you need a refresher, Heartbleed was a flaw in the security of SSL, which is the technology employed by just about everyone on the web to make financial transactions secure. It is essentially the technology that makes people feel comfortable about conducting business on the web.<\/p>\n
This year, another vulnerability in SSL has been found, this one called \u201cDROWN,\u201d which stands for Decrypting RSA with Obsolete and Weakened eNcryption. This attack can completely compromise SSL security, and is estimated to be able to impact more than 11 million sites on the internet, worldwide, so in terms of scope and scale, this is one to pay serious attention to. Combine that with the fact that this attack strikes at the very heart of financial transactions on the internet, and it\u2019s easy to see why there\u2019s cause for concern.<\/p>\n
The good news is that even if this is the first you\u2019re hearing about it, there\u2019s already a fix in place. You can test your site to see if it\u2019s vulnerable by going here: https:\/\/test.drownattack.com\/ . If you\u2019re on the list, additional action should be taken immediately.<\/p>\n
Specifically, have your IT people install OpenSSL version 1.0.2g, if you\u2019re not already using it. If you\u2019re currently running version 1.0.1, you should upgrade to 1.0.1s.<\/p>\n
Typically, internet-based attacks rely on a swarm of PC\u2019s attacking a single point to bring the server down, but servers vulnerable to this bug have been brought down with a single PC attacking it. Even worse, they can often succeed in less than a minute.<\/p>\n
As of the time this piece was written, some of the biggest named companies on the internet are vulnerable to DROWN attacks. If your site is on the list, it\u2019s not really a question of if you\u2019ll be hit, but when, this makes it imperative that you upgrade your OpenSSL immediately.<\/p>\n","protected":false},"excerpt":{"rendered":"
Remember last year\u2019s \u201cHeartbleed\u201d scare? If you don\u2019t, or if you need a refresher, Heartbleed was a flaw in the security of SSL, which is the technology employed by just about everyone on the web to make financial transactions secure. It is essentially the technology that makes people feel comfortable about conducting business on the […]<\/p>\n","protected":false},"author":5,"featured_media":24498,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"\n