CERN Accelerating science

High risk of unsafe web browsing

 
Date & time of incident: 
Tuesday, September 13, 2011 - 09:37
Incident Description: 

Recently, the certification authority DigiNotar has been compromised such that web sites certified by DigiNotar cannot be trusted anymore. This affects more than 500 prominent web sites incl. Google, Microsoft and others. An attacker might take advantage of this by faking one of those prominent websites.Users are asked to update their system as soon as possible. For CERN Scientific Linux run e.g. Yum update. Internet Explorer installations on CERN centrally managed Windows PCs have been already updated, but users of Mozilla Firefox should install the latest updates from Mozilla. Users of any other system should update their system as soon as possible or delete/revoke the DigiNotar certificate from their web browser.Details can be found https://security.web.cern.ch/security/home/en/index.shtml

Service Element Affected: 
Multiple Services
Impact: 
Service is degraded
Status: 
Resolved
Resolution date: 
Tue, Sep 13, 09:00
Posted by: 
IT-DI
Unit responsible for resolution: 
CERN Computer Security