Announcements

Our product news has moved to the new Product Updates page. Please update your bookmarks and subscriptions accordingly. Thanks!

Archived – Box Product News

28103 Views
11 Comments

Starting 8:00 AM PST on November 12, 2018, Box will block applications that are using the TLS 1.0 encryption protocol. Please refer to this FAQ to learn what is TLS, and how you can upgrade your application to maintain a secure connection.

  • Awareness
973 Views
0 Comments

Box was recently notified of a SAML vulnerability identified by security researchers that threat actors could use to bypass primary authentication, potentially elevating permissions or impersonating privileged accounts.

 

Box's Security team has confirmed that our implementation of SAML was not vulnerable to this issue. We advise that customers review their own SAML implementations against the recommended US-CERT guidelines.

  • Awareness

Please log in to subscribe

Stay up to date!

Subscribe to Box newsletters:


First time here?

Tips to get you started: