⚡ Get All Content for 20% Off ⚡

Apple, Google Plan Fixes for Newly Uncovered 'Freak' Security Bug The new security flaw is affecting mobile devices and Mac computers.

By Reuters

entrepreneur daily

This story originally appeared on Reuters

Apple Inc and Google Inc said on Tuesday that they have developed fixes to mitigate the newly uncovered 'Freak' security flaw affecting mobile devices and Mac computers.

The vulnerability in web encryption technology could enable attackers to spy on communications of users of Apple's Safari browser and Google Inc's Android browser, according to researchers who uncovered the flaw.

Apple spokesman Ryan James said the computer had developed a software update to remediate the vulnerability, which would be pushed out next week.

Google spokeswoman Liz Markman said the company had also developed a patch, which it has provided to partners. She declined to say when users could expect to receive those upgrades.

Google typically does not directly push out Android software updates. Instead they are handled by device makers and mobile carriers.

The Washington Post reported that the bug left users of Apple and Google devices vulnerable to cyberattack when visiting hundreds of thousands of websites, including Whitehouse.gov, NSA.gov and FBI.gov. http: (wapo.st/18KaxIA)

Whitehouse.gov and FBI.gov have been fixed, but NSA.gov remains vulnerable, the paper cited Johns Hopkins cryptographer Matthew D. Green as saying.

A group of nine researchers discovered that they could force web browsers to use an form of encryption that was intentionally weakened to comply with U.S. government regulations that ban American companies from exporting the strongest encryption standards, according to the paper.

Once they caused the site to use the weaker export encryption standard, they were then able to break the encryption within a few hours. That could allow hackers to steal data and potentially launch attacks on the sites themselves by taking over elements on a page, the newspaper reported.

Markman said that Google advises all websites to disable support for the less-secure, export-grade encryption.

"Android's connections to most websites - which include Google sites, and others without export certificates - are not subject to this vulnerability," she added.

The group of researchers dubbed the flaw Freak, for "Factoring RSA-EXPORT Keys," according to a website where they described the vulnerability.

(Reporting by Jim Finkle; Editing by Christian Plumb, Bernard Orr)

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Side Hustle

The Remote Side Hustle a 43-Year-Old Musician Works on for 1 Hour a Day Earns Nearly $3,000 a Month: 'All From the Comfort of Home'

Sam Ziegler wanted to supplement his income as a professional drummer — then his tech skills and desire to help people came together.

Marketing

Ever Wonder Why Certain Websites Rank Higher Than Yours? This SEO Expert Reveals The Secret to Dominating Search Results

It's often the smart use of SEO, now supercharged with AI, particularly in keyword optimization.

Franchise

The Top Franchise Brands Growing Globally

While our main Fastest-Growing Franchises list focuses on North American growth, more and more brands are looking to grow worldwide. These are the 25 that had the greatest franchise growth outside the U.S. and Canada from July 2022 to July 2023.

Business News

Dollar Tree Is Closing 1,000 Family Dollar Stores

Dollar Tree acquired Family Dollar in 2015 for an estimated $8.5 billion.