ISSUE 23.01.1 • 2026-01-08 By Susan Bradley The holidays are behind us, so now we can get back to business as usual. You know — when to pause updates so we can test and evaluate the January patches. Thus, the MS-DEFCON goes up to level 2. For those of you still running Windows 10, rest […]

Pentest reports sometimes include bad information under a heading like, “Weak TLS Configuration” or “Insecure SSL Certificates.” This article will explain how TLS is supposed to work, common ways it […]

The post Testing TLS and Certificates  appeared first on Black Hills Information Security, Inc..

David Fletcher// The following blog post is meant to expand upon the findings commonly identified in BHIS reports.  The “Server Supports Weak Transport Layer Security (SSL/TLS)” is almost universal across […]

The post Finding: Server Supports Weak Transport Layer Security (SSL/TLS) appeared first on Black Hills Information Security, Inc..

David Fletcher // Have you ever looked at Nessus scan results to find the below in the output? Recently I was on engagement and encountered just this situation.  I found […]

The post TestSSL.sh –Assessing SSL/TLS Configurations at Scale appeared first on Black Hills Information Security, Inc..