Advertisment

Microsoft bug may 'Freak' you out!

Microsoft discovered a new bug called "Freak" that could potentially put millions of users at risk. The bug lets attackers spy on secure communication.

author-image
Sharath Kumar
New Update
best-practices

SINGAPORE; Software giant Microsoft discovered a new bug called "Freak" that could potentially put millions of users at risk.

Advertisment

Microsoft, which has issued a security warning ever-since, has cautioned about a bug that could let attackers spy on supposedly secure communications.

The bug was found in software used to encrypt data passing between web servers and web users, the Microsoft security warning said.

Originally, the flaw was thought only to affect some users of Android and Blackberry phones and Apple's Safari web browser.

Advertisment

Microsoft's warning suggests millions more may be at risk of losing data.

The Freak flaw was discovered by encryption and security expert Karthikeyan Bhargavan and lets attackers force data traveling between a vulnerable site and a visitor to use weak encryption. This makes it easier to crack open the data and steal sensitive information.

Statistics gathered by a group set up to monitor the impact of the Freak flaw suggest about 9.5% of the web's top one million websites are susceptible to such attacks.

The monitoring group has also produced an online tool that lets people check if they are using a browser that is vulnerable to the flaw.

Apple is expected to produce a patch for the flaw next week and Google has updated its version of Chrome for the Mac to remove its susceptibility to Freak. It has yet to say what action it is taking with Android.

microsoft tech-news security must-read