certificates

After issuing 1.7M certificates, Let’s Encrypt CA officially leaving beta

April 13, 2016

Let’s Encrypt, the non-profit Certificate Authority (CA) backed by the Electronic Frontier Foundation, Mozilla, Cisco, Akamai, and others, is ready to be considered a …

Million-plus sites hosted on WordPress.com get free SSL

April 11, 2016

Friday brought some very good news for existing and future owners of sites hosted on WordPress.com: they will be getting HTTPS protection without having to pay for an SSL …

Pirated App Store client for iOS found on Apple’s App Store

February 22, 2016

An app called 开心日常英语 (“Happy Daily English”), which has been offered for download via Apple’s official App Store, has been revealed to be a fully functional …

Microsoft will stop trusting certificates from 20 Certificate Authorities

December 18, 2015

Starting on January 2016, Microsoft’s Trusted Root Certificate Program will no longer include twenty currently trusted CAs and will remove their root certificates …

Windows machines stop trusting Dell’s two unconstrained root CA certs

December 1, 2015

Microsoft has updated the Certificate Trust list for all supported releases of Microsoft Windows so that the two digital certificates (complete with inadvertently disclosed …

More than 900 embedded devices share hard-coded certs, SSH host keys

November 26, 2015

Embedded devices of some 50 manufacturers has been found sharing the same hard-coded X.509 certificates (for HTTPS) and SSH host keys, a fact that can be exploited by a …

Another root CA cert with key found on Dell’s machines

November 25, 2015

The main piece of news on Monday was that Dell’s desktop PCs and laptops shipped since August 2015 contain a root CA certificate (eDellRoot) complete with the private …

Dell shipped computers with root CA cert, private crypto key included

November 24, 2015

All desktop and laptops shipped by Dell since August 2015 contain a root CA certificate (eDellRoot) complete with the private cryptographic key for it, opening users to the …

Sale of legitimate code-signing certs booms on darknet markets

November 5, 2015

In the underground cybercrime economy, many players have specialized in one or two skills and services. It should come as no surprise, then, that some have become experts at …

With unprotected keys and certificates, businesses lose customers

October 2, 2015

Unprotected and poorly managed keys and certificates result in a loss of customers, costly outages, failed audits, and security breaches, according to The Ponemon Institute …

Symantec fires employees who issued rogue Google certificates

September 21, 2015

Symantec has fired several employees that have been involved in the issuing of rogue certificates for some Google domains.“We learned on Wednesday that a small number of …

D-Link accidentally leaks code-signing certs in its firmware

September 18, 2015

Malware peddlers don’t always have to steal or buy (from sellers on underground forums) legitimate and valid code-signing certificates to sign their malware with – …