Cyber Risks · Cisco Talos

Vulnerability Spotlight: Multiple Vulnerabilities in Inside Secure MatrixSSL

Summary: Cisco Talos reported multiple vulnerabilities in InsideSecure MatrixSSL, discovered by Talos researcher Aleksandar Nikolic, with full details published in three separate advisories. Talos stated that its work developing programmatic methods to identify zero-day vulnerabilities and disclosing them responsibly is critical to improving the overall security of the internet.

Bottom line: MatrixSSL is an embedded TLS library, so these flaws sit in the encryption layer of devices rather than in an application a team can patch on a normal cadence - and Talos notes its detection rules may change as further vulnerability information emerges.

Read the original at Cisco Talos ↗

Topics
Zero-Days & Exploits
Related