Major Weakness in E-commerce and SSL-VPN Connections

A just released report at the SecurityVibes site for CISOs talks about an SSL security hole that has been used to circumvent supposedly secure E-commerce sites and corporate SSL-VPN connections. This hole allows hackers to use man-in-the-middle attack techniques to break into e-commerce sites round the world.  E-commerce sites are renowned for their security as they use the secure HTTPS protocol for all business transactions, however the report from the UK ethical...