UTServicesLISACyber safetyNewsPGP implementations in email vulnerable

PGP implementations in email vulnerable

European researchers have discovered a vulnerability in the way PGP and GPG are implemented in email programs.

The vulnerability appears to be in the part that ensures automatic decryption of messages. For the time being, the advice is to disable tools that ensure automatic decryption.

The standard advice also applies here:

  1. Check the sender. Do you expect such reports from them?
  2. Disable automatic rendering of images and other content in e-mail messages.
  3. Pay attention to strange behavior of your mail program; the PGP / GPG plug-in should give a warning about incorrect encryption.

Update14th May, 14:25: The researcher have published more information  See link below.