Monthly Archives: November 2014

Security

Microsoft Considering Public-Key Pinning for Internet Explorer

Microsoft is considering adding public-key pinning–an important defense against man-in-the-middle attacks–to Internet Explorer. The feature is designed to help protect users against the types of MITM attacks that rely on forged certificates, which comprise a large portion of those attacks. Attackers use forged or stolen certificates to trick victims’ browsers into trusting a malicious site […]

AVG

AVG Technologies and Google Renew Internet Search and Advertising Agreement

AMSTERDAM and SAN FRANCISCO – November 13, 2014 – AVG Technologies N.V. (NYSE: AVG), the online security company™ for 188 million active users, today announced it has signed a renewal of its Internet search and advertising services agreement with Google, Inc. This will help enable continued peace of mind among AVG customers with a unique and safer internet experience that’s powered by Google.

“We are excited to continue our relationship with Google,” said Andrew Reid, SVP at AVG Technologies.  “With this agreement we will continue to offer AVG Secure Search powered by Google.”

The agreement has a 16-month term.  AVG’s secure search is part of its range of award-winning consumer product offerings.  All of our products are designed to provide Internet users with a more secure online experience, no matter the type of device one uses.

 

###

 

About AVG Technologies (NYSE: AVG)

AVG is the online security company providing leading software and services to secure devices, data and people.  AVG has over 188 million active users, as of September 30, 2014, using AVG’s products and services including Internet security, performance optimization, and personal privacy and identity protection. By choosing AVG’s products, users become part of a trusted global community that engages directly with AVG to provide feedback and offer mutual support to other customers.

All trademarks are the property of their respective owners.

www.avg.com

 

Contacts:

US

Betty Taylor

On behalf of AVG Technologies

[email protected]

+ 1 (408) 981-7551

 

UK

Samantha Woodman

Waggener Edstrom for AVG

[email protected]

+ 44 (0)20 7632 3840

NVD

CVE-2014-8564 (enterprise_linux_desktop, enterprise_linux_hpc_node, enterprise_linux_server, enterprise_linux_workstation, gnutls, opensuse, ubuntu_linux)

The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.