On The (Perceived) Value of EV Certs, Commercial CAs, Phishing and Let's EncryptTroy Hunt·Jul 19, 20:29 UTC · Jul 19, 2017Phishing & fraud30
Analysis reveals the most common causes behind mis-issued SSL/TLS certificatesHelp Net Security·Oct 14, 00:00 UTC · Oct 14, 2019Vulnerability30
Underground vendors can reliably obtain code signing certificates from CAsHelp Net Security·Jun 26, 00:00 UTC · Jun 26, 2018Malware30
Why You Shouldn’t Completely Trust Files Signed with Digital CertificatesKaspersky Securelist·Jan 29, 10:00 UTC · Jan 29, 2015Vulnerability30
OWASP Top 10 for .NET developers part 9: Insufficient Transport Layer ProtectionTroy Hunt·Nov 28, 00:00 UTC · Nov 28, 2011Vulnerability30
2011, CAs are under attack. Why steal a certificate?Security Affairs·Dec 7, 21:45 UTC · Dec 7, 2017Malware30
Dissecting TriangleDB, a Triangulation spyware implantKaspersky Securelist·Jun 21, 10:00 UTC · Jun 21, 2023Malware30
The Decreasing Usefulness of Positive Visual Security Indicators (and the Importance of Negative Ones)Troy Hunt·May 7, 08:35 UTC · May 7, 2018Phishing & fraud30
The HTTPS interception dilemma: Pros and consHelp Net Security·Mar 26, 13:33 UTC · Mar 26, 2017Malware30
3 Ways To Achieve Crypto Agility In A Post-Quantum WorldHelp Net Security·Feb 6, 00:00 UTC · Feb 6, 2024Vulnerability30
Keys, tokens and too much trust found in container imagesHelp Net Security·Jun 19, 22:20 UTC · Jun 19, 2017Vulnerability30
C.A.S hacktivists attack Russian organizations using rare RATsKaspersky Securelist·Dec 18, 10:00 UTC · Dec 18, 2024Exploit / PoC45
AppViewX KUBE+ secures containerized workloads and Kubernetes infrastructureHelp Net Security·Oct 4, 00:00 UTC · Oct 4, 2023Ransomware45
Cybercriminals are increasingly using encryption to conceal and launch attacksHelp Net Security·Jan 16, 12:18 UTC · Jan 16, 2023Malware30
New infosec products of the week: April 17, 2020Help Net Security·Apr 17, 00:00 UTC · Apr 17, 2020Policy & legal30
Let's Encrypt Issued A Billion Free SSL Certificates in the Last 4 YearsThe Hacker News·Feb 28, 12:26 UTC · Feb 28, 2020Malware30
Friday Squid Blogging: Giant Squid Caught Off the Coast of IrelandSchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Vulnerability30
Venafi and GlobalSign partnership and integration to address DevOps certificate challengesHelp Net Security·May 20, 00:00 UTC · May 20, 2019Vulnerability30
Extended Validation Certificates are DeadTroy Hunt·Sep 17, 22:02 UTC · Sep 17, 2018Phishing & fraud30
Code Signing certificates becoming popular crime commoditySecurity Affairs·Feb 25, 13:45 UTC · Feb 25, 2018Malware30
MSS Claims NSA Used 42 Cyber Tools in MultiThe Hacker News·Oct 20, 05:32 UTC · Oct 20, 2025Vulnerability30
Using LLMs to Create BioweaponsSchneier on Security·Jan 29, 02:55 UTC · Jan 29, 2025AI safety & security30
Apple’s 45-day certificate proposal: A call to actionHelp Net Security·Nov 13, 10:34 UTC · Nov 13, 2024Phishing & fraud30
Most DevOps pros feel proper certificate issuance policies slow them downHelp Net Security·Dec 14, 11:43 UTC · Dec 14, 2023Vulnerability30
Crypto ATM manufacturer General Bytes hacked, at least $1.5 million stolenThe Record·Mar 20, 20:24 UTC · Mar 20, 2023Data breach45
How Everything We're Told About Website Identity Assurance is WrongTroy Hunt·Feb 16, 19:06 UTC · Feb 16, 2022Phishing & fraud30
Let's Encrypt CA is revoking over 3 Million TLS certificates due to a bugSecurity Affairs·Mar 4, 11:16 UTC · Mar 4, 2020Vulnerability30
Faking Domain Names with Unicode CharactersSchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Vulnerability30
Trusted certificates make phishing websites appear validHelp Net Security·Nov 18, 00:00 UTC · Nov 18, 2019Phishing & fraud30
Extended Validation Certificates are (Really, Really) DeadTroy Hunt·Aug 13, 05:27 UTC · Aug 13, 2019Exploit / PoC45
PayPal's Beautiful Demonstration of Extended Validation FUDTroy Hunt·May 22, 20:28 UTC · May 22, 2019Phishing & fraud30
Explosion of look-alike domains aims to steal sensitive data from online shoppersHelp Net Security·Oct 1, 00:00 UTC · Oct 1, 2018Phishing & fraud30
World Cup Brazil 2014: Don’t score an own goalKaspersky Securelist·May 22, 19:48 UTC · May 22, 2014Data breach45