Security Alerts & News
by Tymoteusz A. Góral

#696 Microsoft SHA-1 deprecation final countdown begins
The home stretch of Microsoft’s planned SHA-1 deprecation schedule has arrived. This summer, with the planned release of the Windows 10 Anniversary Update, users should see signs that the weak cryptographic hash function is being phased out.

Microsoft said that once the anniversary update is rolled out, Microsoft Edge and Internet Explorer will no longer display the lock icon in the address bar for any site signed with a SHA-1 certificate.

Developers should see this happening soon in the Windows Insider Preview build, Microsoft said.

Last November, Microsoft hinted that it would starting blocking SHA-1 signed TLS certificates this June, moving up its scheduled deprecation of SHA-1 by more than six months. By February 2017, Microsoft said last week, Edge and IE will block SHA-1 certs outright.
Read more
#697 Linux foundation badge program to boost open source security
#696 Microsoft SHA-1 deprecation final countdown begins
#695 Ubuntu founder pledges no back doors in Linux
#694 OpenSSL patches two high-severity vulnerabilities
#693 FBI reaffirms stance not to pay ransomware attackers
#692 LG's new fingerprint sensor doesn't need a button
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12