Security News

AWS Launches New Tools for Firewalls, Certificates, Credentials
2018-04-05 05:19

Amazon Web Services (AWS) announced on Wednesday the launch of several tools and services designed to help customers manage their firewalls, use private certificates, and safely store credentials....

Vast Majority of Symantec Certificates Already Replaced: DigiCert
2018-03-15 12:35

Less than 1% of the top 1 million websites have yet to replace Symantec-issued certificates before major browsers distrust them, DigiCert announced this week. Last year, DigiCert bought the...

Firefox 63 to Distrust All Symantec Root Certificates
2018-03-13 13:28

Mozilla this week detailed its plans to completely distrust Symantec root certificates in Firefox 63, set to arrive in October 2018. read more

23,000 Digital Certificates Revoked in DigiCert-Trustico Spat
2018-03-01 14:52

Certificate Authority (CA) DigiCert on Wednesday announced the en-masse revocation of more than 23,000 HTTPS certificates after certificate reseller Trustico sent over the private keys for those...

Darknet Vendors Sell Counterfeit TLS Certificates
2018-02-26 11:47

Pro Tip: Change TLS Certificates Regularly For Better Data SecurityCertificate Authorities continue to be tricked into issuing bogus TLS certificates. A study by Recorded Future found that there...

Use of Fake Code Signing Certificates in Malware Surges
2018-02-23 14:43

There has been surge in the use of counterfeit code signing certificates to evade security detection solutions, despite the high cost such certificates come with, a new Recorded Future report...

Counterfeit digital certificates for sale on underground forums
2018-02-23 13:12

Signing malicious code with valid digital certificates is a helpful trick used by attackers to maximize the odds that malware won’t be flagged by antivirus solutions and often even by network...

Facebook Releases New Certificate Transparency Tools
2017-12-15 15:32

Following the release of the read more

Security Vulnerabilities in Certificate Pinning
2017-12-08 12:15

New research found that many banks offer certificate pinning as a security feature, but fail to authenticate the hostname. This leaves the systems open to man-in-the-middle attacks. From the...

Estonia Invalidates Digital Certificates Over Crypto Crack
2017-11-08 11:03

Unpatched Infineon Chips in Peril as Researchers Speed Up Encryption Key AttackResearchers have discovered how to speed up an attack disclosed last month that recovers secret encryption keys...