certificates

eMudhra security blunder left trusted CA signing keys exposed to anyone

apple, certificates, Google, Mozilla, News /

eMudhra security blunder left trusted CA signing keys exposed to anyone 2026-10-21 at 17:11 By Sinisa Markovic Eight intermediate certificates issued by Indian certificate authority eMudhra were secured with private keys so weak that anyone could recover them from the public certificates in under a second. On its website, the company highlights that it has […]

eMudhra security blunder left trusted CA signing keys exposed to anyone Read More »

Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch

certificates, Data Protection, Let's Encrypt /

Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch 2026-10-12 at 10:53 By Ionut Arghire Beginning February 2027, all newly issued certificates will have a 64-day validity period by default. The post Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch appeared first on SecurityWeek. This article […]

Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch Read More »

Windows PCs missing key updates could lose security fixes in 2027

certificates, cybersecurity, Microsoft, News, security update, Windows /

Windows PCs missing key updates could lose security fixes in 2027 2026-10-12 at 10:39 By Anamarija Pogorelec Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows […]

Windows PCs missing key updates could lose security fixes in 2027 Read More »

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027

certificates, Encryption, Let's Encrypt, News /

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027 2026-10-12 at 10:23 By Sinisa Markovic Websites that rely on Let’s Encrypt will soon have to renew their TLS certificates more often. Starting February 10, 2027, the certificate authority will issue certificates valid for 64 days by default, down from […]

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027 Read More »

Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains

certificates, Google, News /

Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains 2026-10-07 at 14:10 By Sinisa Markovic Attackers who took control of three country-code top-level domains (ccTLDs) used that access to obtain HTTPS certificates for several Google domains and for domains run by other large organizations, Google disclosed on Tuesday. Attackers compromised the third-party […]

Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains Read More »

Certificate failures can cost firms over $250,000

automation, certificates, cybersecurity, DigiCert, News, report, SSL/TLS /

Certificate failures can cost firms over $250,000 2026-09-14 at 07:30 By Anamarija Pogorelec The move toward 47-day public TLS certificates by 2029 will increase the certificate management workload for enterprises, according to DigiCert’s Certificate Management Outlook. Organizations will need to renew certificates more than eight times as often as under the previous certificate lifecycle and […]

Certificate failures can cost firms over $250,000 Read More »

AWS Certificate Manager sets 2027 end date for email-validated certificate renewals

AWS, certificate authority, certificates, cybersecurity, News /

AWS Certificate Manager sets 2027 end date for email-validated certificate renewals 2026-08-14 at 11:25 By Anamarija Pogorelec AWS Certificate Manager (ACM) will phase out email validation for public certificates throughout 2027, ahead of the Certification Authority/Browser (CA/B) Forum’s March 15, 2028 deadline for ending email-based domain validation. The CA/B Forum sets standards that browsers and […]

AWS Certificate Manager sets 2027 end date for email-validated certificate renewals Read More »

15 TP-Link Omada vulnerabilities let attackers hijack routers and intercept camera traffic

Black Hat, Black Hat USA 2026, certificates, Don't miss, Forescout, Google Play, hardware, networking, News, report, research, router, smart home, SMBs, TP-LINK, vulnerability /

15 TP-Link Omada vulnerabilities let attackers hijack routers and intercept camera traffic 2026-08-05 at 12:35 By Mirko Zorz TP-Link prints the serial number of an Omada router on its packaging and on a label attached to the device. Those numbers run in sequence, and feeding a guessed one to the Omada cloud service returns the […]

15 TP-Link Omada vulnerabilities let attackers hijack routers and intercept camera traffic Read More »

AI can’t fix cybersecurity’s hiring problem

AI, automation, certificates, Compliance, News, regulation, report, SANS, skill development /

AI can’t fix cybersecurity’s hiring problem 2026-07-22 at 07:30 By Anamarija Pogorelec Organizations are redefining cybersecurity roles through workforce frameworks and placing greater emphasis on verified skills as AI and new regulatory requirements change hiring. The SANS 2026 Cybersecurity Workforce Survey found demand for specialists in new roles more than doubled over the past year, […]

AI can’t fix cybersecurity’s hiring problem Read More »

Let’s Encrypt works toward post-quantum certificates at web scale

authentication, certificate authority, certificates, Encryption, Let's Encrypt, News, quantum computing /

Let’s Encrypt works toward post-quantum certificates at web scale 2026-06-05 at 15:49 By Anamarija Pogorelec Let’s Encrypt plans to pursue a post-quantum-safe Web PKI through Merkle Tree Certificates (MTCs), a new approach that adds post-quantum authentication to the web without sacrificing the speed and reliability that have made TLS universal. The project is targeting late […]

Let’s Encrypt works toward post-quantum certificates at web scale Read More »

OpenAI Hit by TanStack Supply Chain Attack

AI, Artificial Intelligence, certificates, OpenAI, supply chain attack, Supply Chain Security, TanStack /

OpenAI Hit by TanStack Supply Chain Attack 2026-05-15 at 14:32 By Ionut Arghire Two employee devices were compromised in the attack, and credential material was stolen from OpenAI code repositories. The post OpenAI Hit by TanStack Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

OpenAI Hit by TanStack Supply Chain Attack Read More »

Zombie linkages are keeping expired domains trusted for years

certificates, DNS, domain information, News, research /

Zombie linkages are keeping expired domains trusted for years 2026-05-15 at 08:24 By Sinisa Markovic Domains expire, get transferred, and return to the market every day. The systems connected to those domains can continue trusting the original owner long after control has changed. Researchers at USC and the University of Twente examined this problem in […]

Zombie linkages are keeping expired domains trusted for years Read More »

DigiCert Revokes Certificates After Support Portal Hack

certificates, Data Breaches, DigiCert, Malware /

DigiCert Revokes Certificates After Support Portal Hack 2026-05-04 at 16:22 By Ionut Arghire Hackers delivered malware via a customer chat channel, infected an analyst’s system, and accessed the internal support portal. The post DigiCert Revokes Certificates After Support Portal Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

DigiCert Revokes Certificates After Support Portal Hack Read More »

Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches

certificates, Microsoft, News, tips, Windows /

Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches 2026-04-03 at 14:57 By Anamarija Pogorelec Microsoft’s Secure Boot certificates, issued in 2011, are approaching expiration in 2026. To help IT administrators track whether devices have received replacement certificates, Microsoft has added new status indicators to the Windows Security app, under Device […]

Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches Read More »

Certificate lifespans are shrinking and most organizations aren’t ready

certificates, cybersecurity, Don't miss, Encryption, Features, GlobalSign, Hot stuff, News, PKI, quantum computing, strategy /

Certificate lifespans are shrinking and most organizations aren’t ready 2026-03-16 at 08:32 By Mirko Zorz The push for shorter TLS certificate lifespans has been building for years. It started with Google’s internal push toward 90-day certificates, which gained traction inside the industry before resistance from enterprise customers slowed things down. Then Apple proposed 47-day certificates, […]

Certificate lifespans are shrinking and most organizations aren’t ready Read More »

Google Working Towards Quantum-Safe Chrome HTTPS Certificates 

certificates, Chrome, Data Protection, HTTPS, Quantum, Quantum secure /

Google Working Towards Quantum-Safe Chrome HTTPS Certificates  2026-03-02 at 13:47 By Ionut Arghire The internet giant is developing an evolution of the certificates based on Merkle Tree Certificates (MTCs). The post Google Working Towards Quantum-Safe Chrome HTTPS Certificates  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Working Towards Quantum-Safe Chrome HTTPS Certificates  Read More »

Microsoft revokes 200 certs used to sign malicious Teams installers

certificates, Don't miss, Hot stuff, Microsoft, Microsoft Teams, News, Ransomware /

Microsoft revokes 200 certs used to sign malicious Teams installers 2025-10-17 at 15:59 By Zeljka Zorz By revoking 200 software-signing certificates, Microsoft has hampered the activities of Vanilla Tempest, a ransomware-wielding threat actor that has been targeting organizations with malware posing as Microsoft Teams. “In this campaign, Vanilla Tempest used fake MSTeamsSetup.exe files hosted on […]

Microsoft revokes 200 certs used to sign malicious Teams installers Read More »

Microsoft Revokes Over 200 Certificates to Disrupt Ransomware Campaign

certificates, disrupted, Microsoft, Ransomware, Rhysida, Vanilla Tempest, Vice Society /

Microsoft Revokes Over 200 Certificates to Disrupt Ransomware Campaign 2025-10-16 at 17:45 By Eduard Kovacs The tech giant attributed the attacks to Vanilla Tempest, also known as Vice Spider and Vice Society. The post Microsoft Revokes Over 200 Certificates to Disrupt Ransomware Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Microsoft Revokes Over 200 Certificates to Disrupt Ransomware Campaign Read More »

What EU’s PQC roadmap means on the ground

certificates, cybersecurity, Don't miss, Encryption, EU, F5 Networks, Features, Hot stuff, News, quantum computing, regulation, standards /

What EU’s PQC roadmap means on the ground 2025-07-10 at 09:11 By Mirko Zorz In this Help Net Security interview, David Warburton, Director at F5 Labs, discusses how the EU’s Post-Quantum Cryptography (PQC) roadmap aligns with global efforts and addresses both the technical and regulatory challenges of migrating to PQC. Warburton also outlines practical steps […]

What EU’s PQC roadmap means on the ground Read More »

Connectwise is rotating code signing certificates. What happened?

certificates, ConnectWise, CyberProof, Don't miss, Hot stuff, LUMU, News, security update /

Connectwise is rotating code signing certificates. What happened? 2025-06-11 at 17:48 By Zeljka Zorz Connectwise customers who use the company’s ScreenConnect, Automate, and ConnectWise RMM solutions are urged to update all agents and/or validate that the update has been deployed by Friday, June 13 at 8:00 p.m. ET, or risk disruptions. The reason for the […]

Connectwise is rotating code signing certificates. What happened? Read More »

Scroll to Top