Tag: certificate authorities
-
The Cloudflare Blog: Introducing new regional Internet traffic and Certificate Transparency insights on Cloudflare Radar
Source URL: https://blog.cloudflare.com/new-regional-internet-traffic-and-certificate-transparency-insights-on-radar/ Source: The Cloudflare Blog Title: Introducing new regional Internet traffic and Certificate Transparency insights on Cloudflare Radar Feedly Summary: Cloudflare Radar now offers a Certificate Transparency dashboard for monitoring TLS certificate activity, and new regional traffic insights for a sub-national perspective on Internet trends. AI Summary and Description: Yes **Summary:** The text…
-
The Cloudflare Blog: Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1
Source URL: https://blog.cloudflare.com/unauthorized-issuance-of-certificates-for-1-1-1-1/ Source: The Cloudflare Blog Title: Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1 Feedly Summary: Unauthorized TLS certificates were issued for 1.1.1.1 by a Certification Authority without permission from Cloudflare. These rogue certificates have now been revoked. AI Summary and Description: Yes Summary: The text describes a serious incident involving…
-
Cloud Blog: From Help Desk to Hypervisor: Defending Your VMware vSphere Estate from UNC3944
Source URL: https://cloud.google.com/blog/topics/threat-intelligence/defending-vsphere-from-unc3944/ Source: Cloud Blog Title: From Help Desk to Hypervisor: Defending Your VMware vSphere Estate from UNC3944 Feedly Summary: Introduction In mid 2025, Google Threat Intelligence Group (GITG) identified a sophisticated and aggressive cyber campaign targeting multiple industries, including retail, airline, and insurance. This was the work of UNC3944, a financially motivated threat…
-
AWS News Blog: AWS Certificate Manager introduces exportable public SSL/TLS certificates to use anywhere
Source URL: https://aws.amazon.com/blogs/aws/aws-certificate-manager-introduces-exportable-public-ssl-tls-certificates-to-use-anywhere/ Source: AWS News Blog Title: AWS Certificate Manager introduces exportable public SSL/TLS certificates to use anywhere Feedly Summary: You can now use AWS Certificate Manager to issue exportable public certificates for your AWS, hybrid, or multicloud workloads that require secure TLS traffic termination. AI Summary and Description: Yes Summary: The announcement details…
-
Google Online Security Blog: Sustaining Digital Certificate Security – Upcoming Changes to the Chrome Root Store
Source URL: https://security.googleblog.com/2025/05/sustaining-digital-certificate-security-chrome-root-store-changes.html Source: Google Online Security Blog Title: Sustaining Digital Certificate Security – Upcoming Changes to the Chrome Root Store Feedly Summary: AI Summary and Description: Yes **Summary:** Google Chrome has announced the removal of default trust for Certification Authorities (CAs) Chunghwa Telecom and Netlock, effective August 1, 2025, due to observed compliance failures…
-
Slashdot: The EFF’s ‘Certbot’ Now Supports Six-Day Certs
Source URL: https://it.slashdot.org/story/25/04/14/0356212/the-effs-certbot-now-supports-six-day-certs?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: The EFF’s ‘Certbot’ Now Supports Six-Day Certs Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the evolution of TLS certificate lifetimes, particularly the shift towards shorter certificates initiated by Let’s Encrypt. This trend emphasizes enhanced security through automation and reduced risk associated with compromised private keys,…
-
NCSC Feed: ROCA: Infineon TPM and Secure Element RSA Vulnerability Guidance
Source URL: https://www.ncsc.gov.uk/guidance/roca-infineon-tpm-and-secure-element-rsa-vulnerability-guidance Source: NCSC Feed Title: ROCA: Infineon TPM and Secure Element RSA Vulnerability Guidance Feedly Summary: Guidance for those who want to understand and reduce the impact of the ROCA vulnerability. AI Summary and Description: Yes Summary: The provided text discusses the implementation and vulnerabilities of Trusted Platform Modules (TPMs) and Secure Elements…
-
Hacker News: How to distrust a CA without any certificate errors
Source URL: https://dadrian.io/blog/posts/sct-not-after/ Source: Hacker News Title: How to distrust a CA without any certificate errors Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the concept of “distrust” in the context of certificate authorities (CAs) that issue HTTPS certificates, emphasizing changes in the management of certificate trustworthiness due to compliance failures…
-
Hacker News: Fabrication Begins for Production OpenTitan Silicon – Google Open Source Blog
Source URL: https://opensource.googleblog.com/2025/02/fabrication-begins-for-production-opentitan-silicon.html Source: Hacker News Title: Fabrication Begins for Production OpenTitan Silicon – Google Open Source Blog Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details the announcement of Google’s production-ready OpenTitan silicon, the first open-source Root of Trust (RoT) for silicon. This initiative is significant for the security landscape of…
-
Hacker News: Let’s Encrypt to end OCSP support in 2025
Source URL: https://scotthelme.co.uk/lets-encrypt-to-end-ocsp-support-in-2025/ Source: Hacker News Title: Let’s Encrypt to end OCSP support in 2025 Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the significant decision by Let’s Encrypt, the largest Certificate Authority (CA) globally, to discontinue support for the Online Certificate Status Protocol (OCSP) in 2025. It outlines the implications…