By Guest Author Teja Myneedu, Director—Product Security Engineering and Research, TripActions OpenSSL is a commonly used cryptographic toolkit widely used for SSL/TLS across web-based applications. The OpenSSL project routinely releases bug fixes and patches without prior warning. So, when they forewarned everyone about an upcoming patch release that had a fix ... Read More

... Read more » The post OpenSSL 3.0.x Vulnerability: Remote Code Execution (CVE-2022-3602, CVE-2022-3786) appeared first on Deepfactor ... Read More

By Guest Author Teja Myneedu, Director—Product Security Engineering and Research, TripActions Following the Log4Shell exploit discovered in Java logging library Log4j in December 2021, it is the latest trend to sensationalize all new Java library vulnerabilities with the name ‘4shell’. After Spring4Shell earlier this year the latest vulnerability is Text4Shell ... Read More