Security News

Open-source keygen snafu sparks 63-bit TLS cert revoke runaround
2019-03-13 18:12

What a difference a bit makes. 64 little flowers... brought the revokes and the scowls A mailing list bunfight over a controversial UAE mobile security company led to the discovery that millions...

Week in review: Critical Chrome zero-day, TLS certs for sale on dark web, RSA Conference 2019
2019-03-10 19:30

Here’s an overview of some of last week’s most interesting news and articles: RSA Conference 2018 coverage Check out what you missed at the infosec event of the year. How malware traverses your...

Study Finds Rampant Sale of SSL/TLS Certificates on Dark Web
2019-03-07 16:59

SSL and TLS certificates and related services can be easily acquired from dark web marketplaces, according to an academic study sponsored by Venafi, a company specializing in the protection of...

Sale of SSL/TLS certificates on the dark web is rampant
2019-03-06 09:43

There is no dearth of compromised, fake and forged SSL/TLS certificates for sale on dark web markets, researchers have found. TLS certificates are sold individually and packaged with a wide range...

RSAC 2019: TLS Markets Flourish on the Dark Web
2019-03-06 08:01

The certificates are often paired with ancillary products, like Google-indexed “aged” domains, after-sale support, web design services and even integration with a range of payment processors.

Let's Encrypt Begins Retirement of TLS-SNI-01 Validation
2019-01-22 16:03

Free and open Certificate Authority (CA) Let’s Encrypt today started the process of completely retiring TLS-SNI-01 validation support.  read more

Get in the bin: Let's Encrypt gives admins until February 13 to switch off TLS-SNI
2019-01-22 10:31

End-of-life followed 2018 fake Website certificate drama If you're still using TLS-SNI, stop: a year after a slip-up allowed miscreants to claim Let's Encrypt certificates for domains they didn't...

TLS Certificates for Many .gov Domains Not Renewed Due to Government Shutdown
2019-01-10 17:02

Many TLS certificates for .gov domains have not been renewed due to the ongoing shutdown of the United States government, making them insecure or inaccessible. read more

Google Secures Public DNS Queries With DNS-over-TLS
2019-01-10 15:33

Google this week announced that users can now secure queries between their devices and the Google Public DNS with DNS-over-TLS, which improves their privacy and integrity.  read more

Google DNS Service (8.8.8.8) Now Supports DNS-over-TLS Security
2019-01-10 08:48

Almost every activity on the Internet starts with a DNS query, a key function of the Internet that works as an Internet's directory where your device looks up for the server IP addresses after you...