Security News

US-CERT Warns HTTPS Inspection May Degrade TLS Security (Threatpost)
2017-03-17 10:00

Security tools that proxy and inspect HTTPS traffic create a blindspot for network administrators trying to determine whether communication between clients and servers is secure.

CERT updates insider threat guidebook (Help Net Security)
2017-02-10 12:30

The CERT Division of the Software Engineering Institute (SEI) at Carnegie Mellon University released the fifth edition of the Common Sense Guide to Mitigating Insider Threats. The guide describes...

Buggy Domain Validation Forces GoDaddy to Revoke Certs (Threatpost)
2017-01-11 21:40

A bug in GoDaddy's domain validation process forced the registrar to revoke SSL certificates and reissue certs for more than 6,000 customers.

Google to Distrust WoSign, StartCom Certs in 2017 (Threatpost)
2016-11-01 17:58

Google announced Monday that it will distrust certificates issued by WoSign and StartCom when in it ships Chrome 56 in January 2017.