Md5 actually harmful
Summary: Cisco Talos describes research proving an MD5-based certificate attack is realistic and viable, and notes that detecting it is not really feasible because the bad certificates look exactly like valid ones. The post recommends a browser plugin that stores each site's certificate and alerts on changes, similar to how ssh works, and offers a Snort rule that flags the Md5WithRsaEncryption identifier in OCSP responses.
Bottom line: The forged certificates are indistinguishable from legitimate ones, so a site not currently using an MD5-signed certificate offers no protection; the only signal Talos offers is a Snort rule that fires on MD5 usage in OCSP traffic and leaves the validity judgment to you.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026