Discussion - OpenSSL Vulnerability - The Discovery Problem

I wanted to share my predictions regarding the issues that will arise when trying to triage the OpenSSL vulnerability that is going to be published tomorrow. 


It is important to say that all the predictions are my opinion only which at the end could be not accurate. I believe that the biggest issue will be discovering where OpenSSL version 3.x is present in production environments. This is due to the fact it can be packaged in different ways. 


Overall, OpenSSL …

cybersecurity discovery openssl openssl vulnerability problem vulnerability