domain validation – Experimental News Clipping Site

The Register: Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps

Apr 22, 2025

—

by

Source URL: https://www.theregister.com/2025/04/22/ssl_com_validation_flaw/ Source: The Register Title: Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps Feedly Summary: 10 other certificates ‘were mis-issued and have now been revoked’ Certificate issuer SSL.com’s domain validation system had an unfortunate bug that was exploited by miscreants to obtain, without authorization, digital certs for…

AWS Open Source Blog: AWS Cloud Credits for Open Source Projects: Affirming Our Commitment

Mar 31, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://aws.amazon.com/blogs/opensource/aws-cloud-credits-for-open-source-projects-affirming-our-commitment/ Source: AWS Open Source Blog Title: AWS Cloud Credits for Open Source Projects: Affirming Our Commitment Feedly Summary: Today, Amazon Web Services is proud to reaffirm our commitment to providing vital infrastructure for free and open source software projects. One of the ways we are doing this is with an extended $3…

Google Online Security Blog: New security requirements adopted by HTTPS certificate industry

Mar 27, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: http://security.googleblog.com/2025/03/new-security-requirements-adopted-by.html Source: Google Online Security Blog Title: New security requirements adopted by HTTPS certificate industry Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the Chrome Root Program, detailing initiatives aimed at enhancing the security of TLS connections and the Web PKI ecosystem. Key developments include the adoption of Multi-Perspective Issuance…

Bulletins: Vulnerability Summary for the Week of March 10, 2025

Mar 17, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.cisa.gov/news-events/bulletins/sb25-076 Source: Bulletins Title: Vulnerability Summary for the Week of March 10, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 1E–1E Client Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged…

Tag: domain validation

The Register: Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps

AWS Open Source Blog: AWS Cloud Credits for Open Source Projects: Affirming Our Commitment

Google Online Security Blog: New security requirements adopted by HTTPS certificate industry

Bulletins: Vulnerability Summary for the Week of March 10, 2025