328 Comments - Last post 3 hours ago by medion
98 Comments - Last post 4 hours ago by jojo1241
16,722 Comments - Last post 5 hours ago by Vee79
391 Comments - Last post 6 hours ago by SeefKroy
29 Comments - Last post 14 hours ago by scap
914 Comments - Last post 16 hours ago by wigglenose
37 Comments - Last post 16 hours ago by spodamayn
60 Comments - Last post 30 minutes ago by Deleted2137
1,367 Comments - Last post 31 minutes ago by Tucs
995 Comments - Last post 1 hour ago by Arwiee
124 Comments - Last post 1 hour ago by GeekDoesStuff
23 Comments - Last post 1 hour ago by PatchmaN
52 Comments - Last post 1 hour ago by Ashtart
3,753 Comments - Last post 2 hours ago by masterbubu87
What is the Superfish vulnerability?
A software known as Superfish Visual Discovery was pre-installed on Lenovo products over the last two years. The Superfish software pushes ads in Google search results and websites that “help users find and discover products visually”.
However, it was discovered that the Superfish software was installing its own self-signed Root Certificate Authority so that the Superfish software always appears as a trusted party. The Superfish software would have the ability to then intercept supposedly-secure communications to websites via a man-in-the-middle attack. Researchers also confirmed that hackers on the same network, like an open WiFi hotspot at a coffee shop, can exploit Superfish to steal things like your banking login details or to read your emails. The good news is that Lenovo has stopped pre-loading Superfish as of January 2015. The bad news is that millions of Lenovo laptops were shipped with Superfish running on them (we don’t have a list of affected devices at this time). Superfish appears to impact Internet Explorer and Chrome on those Lenovo computers.
Take action now to protect yourself from Superfish.
You can visit this Superfish checker: https://lastpass.com/superfish/ will verify if Superfish is running on your machine and tell you whether or not your system is at risk.
Learn more about the Superfish vulnerability on lastpass blog
Comment has been collapsed.