SSL

Qihoo 360 Leaked Its Own Wildcard SSL Private Key Inside Public AI Installer

China's largest cybersecurity firm, Qihoo 360, has inadvertently exposed its own wildcard SSL private key by bundling it directly inside…

6 months ago

Let’s Encrypt to Reduce Certificate Validity from 90 Days to 45 Days

Let’s Encrypt has officially announced plans to reduce the maximum validity period of its SSL/TLS certificates from 90 days to…

9 months ago

Mis-issued TLS Certificates for 1.1.1.1 DNS Service Enable Attackers to Decrypt Traffic

The discovery of three improperly issued TLS certificates for 1.1.1.1, the popular public DNS service from Cloudflare, and the Asia…

12 months ago

Cobalt Strike 4.11.1 Released With Fix For ‘Enable SSL’ Checkbox

Fortra has released Cobalt Strike 4.11.1, an out-of-band update addressing critical issues discovered in their recent 4.11 release.  This update,…

1 year ago

SSL/TLS Certificates Validity To Be Reduced From 398 Days to 47 Days

CA/Browser Forum has approved a proposal to reduce the maximum validity of SSL/TLS certificates from the current 398 days to…

1 year ago

OpenVPN Easy-RSA Vulnerability Enables Bruteforce of Private CA Key

A critical vulnerability (CVE-2024-13454) has been identified in Easy-RSA versions 3.0.5 through 3.1.7 when used with OpenSSL 3.  This flaw…

2 years ago

DigiCert to Revoke Thousands of Certificates Following DNS Validation Error

DigiCert, a major certificate authority, to revoke thousands of SSL/TLS certificates because of a Domain Control Verification error. This could…

2 years ago

Understanding The Different Types Of SSL Certificates

As of January 2024, over 302 million SSL certificates had been issued online. Secure Sockets Layer (SSL) is a security…

2 years ago

SSL Certificate Management 101

Certificate management is crucial for ensuring the security, integrity, and authenticity of your organization's digital communications and transactions. As your…

3 years ago

Maltego’s New SSL Certificate Spotter to Detect Suspicious Certificate

As the world becomes more reliant on technology, the importance of cybersecurity cannot be overstated. Being proactive in identifying and…

3 years ago