#downgradeattack — Public Fediverse posts

Microsoft Entra ID's secure login just got a wake-up call. Hackers are manipulating FIDO's fallback system to slip in through legacy protocols—reminding us that even cutting-edge security can have hidden weak spots. What does this mean for your digital safety?

https://thedefendopsdiaries.com/emerging-downgrade-attack-on-fido-authentication-in-microsoft-entra-id/

#fidoauthentication
#microsoftentra
#cybersecurity
#downgradeattack
#legacyprotocols

Microsoft Entra ID's secure login just got a wake-up call. Hackers are manipulating FIDO's fallback system to slip in through legacy protocols—reminding us that even cutting-edge security can have hidden weak spots. What does this mean for your digital safety?

https://thedefendopsdiaries.com/emerging-downgrade-attack-on-fido-authentication-in-microsoft-entra-id/

#fidoauthentication
#microsoftentra
#cybersecurity
#downgradeattack
#legacyprotocols

Microsoft Entra ID's secure login just got a wake-up call. Hackers are manipulating FIDO's fallback system to slip in through legacy protocols—reminding us that even cutting-edge security can have hidden weak spots. What does this mean for your digital safety?

https://thedefendopsdiaries.com/emerging-downgrade-attack-on-fido-authentication-in-microsoft-entra-id/

#fidoauthentication
#microsoftentra
#cybersecurity
#downgradeattack
#legacyprotocols

New Windows Downgrade Attack Let Hackers Downgrade Patched Systems https://cybersecuritynews.com/windows-downgrade-attack/ #VulnerabilityExploitation #CyberSecurityNews #DowngradeAttack #WindowsSecurity #Vulnerability #Windows

Is anyone else getting the 'Secure Site Not Available' screen in #TorBrowser?

Its been appearing frequently in Tor since about a year ago now, and it tries to downgrade the connection to an #insecure #HTTP request.

It occurs somewhat randomly.

Our first thought was some sort of #exitNode TLS #DownGradeAttack, but we have reason to believe that the browser is randomly just trying to force users to downgrade their connection.

Thoughts?

#secureSiteNotAvailable #SSL #TLS

FEDI SECURITY ISSUE (please boost)

When we attempted to access a page at fediverse.party recently, we were served a page with an insecure connection, this is despite using #TorBrowser, which supposedly has #HttpsEverywhere?

So does anyone know what is going on here? Is fediverse.party susceptible to a #downgradeAttack?

Please boost so we can get to the bottom of it.