Upcoming Security Update - Deactivation of Weak Ciphers (November 13, 2023)
Scheduled Maintenance Report for Recorded Future
Completed
The scheduled maintenance has been completed.
Posted Nov 13, 2023 - 04:31 EST
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Nov 13, 2023 - 04:01 EST
Scheduled
Dear Client,

Recorded Future will deactivate support for a number of deprecated TLS cipher suites on Monday, November 13th, 2023, across all public-facing Recorded Future platform applications including the Recorded Future Portal, Connect API, and related integrations and services . We're providing you notice now so that our customers and partners can prepare for this upcoming update.

The following cipher suites will be deactivated:

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_128_GCM_SHA256
TLS_RSA_WITH_AES_128_CBC_SHA256
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_256_GCM_SHA384
TLS_RSA_WITH_AES_256_CBC_SHA256
TLS_RSA_WITH_AES_256_CBC_SHA
SSL_CK_DES_192_EDE3_CBC_WITH_SHA
DES-CBC3-SHA
ECDHE-ECDSA-AES128-SHA


If the browser (or other connection agent) you are using does not support any of the modern ciphers, you’ll get presented with an error message presented by your web browser or other tool as a result of trying to connect to the Recorded Platform.

That being said, we expect very minimal impact from this change, with less than .1% of connection attempts utilizing these ciphers actively across our platform. Otherwise, no downtime is expected with this update.

We're deactivating these cipher suites to ensure we're providing you with safe and secure connections. The security industry considers ciphers that support CBC mode encryption to be weak due to past exploits and bugs against specific implementations.

If you have any questions about this change ahead of the update, please contact Recorded Future support at support@recordedfuture.com. Thank you.

Regards,
Recorded Future Platform Operations
Posted Nov 02, 2023 - 12:05 EDT
This scheduled maintenance affected: User Interface, API, and Company homepage.