Newly-discovered Security Bug has Gone to the Dogs

Newly-discovered Security Bug has Gone to the Dogs

  • By Ginger Hill
  • Oct 16, 2014

Newly-discovered Security Bug has Gone to the DogsAll this time, when I thought of the word “poodle,” I imagined white mounds of curly hair, two pink bows, one in each ear, and a cotton-ball tail…not anymore. Thanks to the newly-discovered “Poodle” attack, a security bug used in encryption technology that can allow attackers to take over accounts including email, banking and other services, now the word “poodle” conjures up images of a cyber Cujo.

After discovering Padding Oracle On Downloaded Legacy Encryption, or Poodle, web browser and server software creators are advising users to disable an 18-year old encryption standard – SSL 3.0. This is because security experts are saying that attackers can use Poodle to steal browser cookies (That's what I call Mollie’s dog treats: “cookies.” Lots of dog references with this bug...and it's not even a flea or tick!)

Supposedly Poodle isn’t as serious as Heartbleed or Shellshock because these required hackers to have privileged access to networks. Nevertheless, with Poodle, SSL 3.0 is no longer secure, prompting browsers, such as Mozilla, to disable it in their next version of Firefox, scheduled to be released on November 25 (just in time for Cyber Monday, might I add).

About the Author

Ginger Hill is Group Social Media Manager.

Featured

  • Collaboration Made Easy Using a Work Management Platform

    Effective collaboration between security operators, teams and other departments is critical to the smooth functioning of organizations. Yet, as organizations grow in complexity, it becomes more difficult for teams to coordinate with each other. This is compounded by staffing shortages, turnover and ineffective collaboration tools. Read Now

  • Creating a Safer World

    Managing and supporting locks and door hardware within a facility is a big responsibility. A building’s security needs to change over time as occupancy and use demands evolve, which can make it even more challenging. Read Now

  • Creating More Versatility

    Today, AI has become top of mind for most security professionals. It is the topic of conversation in the technology world and continues to transform the way data is used to make important business decisions. Read Now

  • Report: 78 Percent of CISOs Seeing Significant Impact from AI-Powered Cyber Threats

    Darktrace recently unveiled its 2025 State of AI Cybersecurity report. The findings reveal that 78% of Chief Information Security Officers (CISOs) surveyed say that AI-powered threats are having a significant impact on their organizations, a 5% increase1 from 2024. While an increasing number of CISOs report feeling a significant impact from AI threats, more than 60% now say that they are adequately prepared to defend against these threats, an increase of nearly 15% year-over-year. However, insufficient AI knowledge and skills and a shortage of personnel and talent continue to be listed as the two top inhibitors to a successful defense. Read Now

Most   Popular

New Products

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame.

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities