#ECDSAVulnerability

It’s Possible to Clone YubiKeys Thanks to a Newly Discovered Vulnerability

by

September 4, 2024 at 12:12PM Security researchers have discovered a vulnerability in YubiKey 5 that could allow skilled hackers to clone the device, due to a cryptographic flaw. This could impact millions of users relying on YubiKeys for secure authentication. Exploiting the vulnerability demands significant time, expertise, and costly equipment, making it a complex and … Read more

Critical PuTTY Vulnerability Allows Secret Key Recovery

by

April 16, 2024 at 12:54PM PuTTY developers released an update to patch a critical vulnerability allowing recovery of secret keys. The vulnerability affects versions 0.68 through 0.80, with PuTTY 0.81 fixing the issue. Affected keys, including those used by products like FileZilla and WinSCP, must be revoked immediately. Researchers warned of the potential for key … Read more