Digital signature

Improper Certificate Validation issue in LibreOffice and OpenOffice allows signed docs spoofing

LibreOffice and OpenOffice released security updates to address a vulnerability that can be exploited by an attacker to spoof signed…

3 years ago

These 2 attacks allow to alter certified PDF Documents

Researchers disclosed two new attack techniques that allow modifying visible content on certified PDF documents without invalidating the digital signature.…

3 years ago

Shadow attacks allow replacing content in signed PDF files

Boffins from the Ruhr University Bochum (Germany) have disclosed a series of new attack methods, dubbed Shadow attacks, against signed…

4 years ago

Experts devised 3 attacks Show Signed PDF Documents Cannot Be Trusted

Experts found several flaws in popular PDF viewers and online validation services that allow to deceive the digital signature validation…

5 years ago

Android Janus vulnerability allows attackers to inject Malware into legitimate apps avoiding detection

Google fixed a bug dubbed Janus that could be exploited by attackers to inject malicious code into Android apps without affecting an…

6 years ago

Businesses Using Millions of insecure SHA-1 Certificates

Experts at Netcraft discovered that nearly a million SSL SHA-1 certificates were signed with the potentially vulnerable SHA-1 hashing algorithm.…

9 years ago

D-Link firmware accidentally includes Code Signing Keys

The Taiwanese networking equipment manufacturer D-Link has accidentally published its private code signing keys in the source of one of…

9 years ago

Security expert Billy Rios created WhiteScope, the database of whitelisted ICS and SCADA files

Security researcher Billy Rios has created WhiteScope, a database containing hundreds of thousands of "known-good" files of SCADA and ICS…

9 years ago

DNS Protocol affected by a serious flaw, Internet users are at risk

Technion students Find a security vulnerability in the Internet DNS protocol which allows the attackers to redirect users to a…

10 years ago

New Android Master Key attack revealed by Android Security Squad

The China-based group Android Security Squad revealed a new Android Master Key attack that exploits the vulnerability in the way the…

11 years ago

This website uses cookies.