New ‘FREAK Attack’ Exploits SSL/TLS Vulnerability Between Many Servers and Clients

A newly disclosed SSL/TLS vulnerability known as the FREAK attack allows attackers to intercept HTTPS connections between clients and servers, and forces them to downgrade security to weak “export-grade” cryptography allowing the message to be decrypted and even altered.