SSL/TLS Archives • Daily CyberSecurity

Do Son May 5, 2026

On April 2, 2026, DigiCert, a preeminent global authority in digital signatures, fell victim to a sophisticated...

Patch Now: GnuTLS Release 3.8.13 Fixes 12 Vulnerabilities GnuTLS Security Update DTLS Heap Overwrite GnuTLS Vulnerability CVE-2026-1584

Do Son May 4, 2026

The GnuTLS project, a vital secure communications library used extensively across the Linux ecosystem to implement SSL,...

Handshake Halt: GnuTLS 3.8.12 Fixes TLS 1.3 Crash & CPU Exhaustion GnuTLS Security Update DTLS Heap Overwrite GnuTLS Vulnerability CVE-2026-1584

Do Son February 11, 2026

The maintainers of GnuTLS, a core library used by countless applications to secure network communications, have released...

Pre-Auth RCE Risk: OpenSSL Patches High-Severity Stack Overflow (CVE-2025-15467) OpenSSL Vulnerability RSA Memory Leak OpenSSL Vulnerability CVE-2025-15467 CVE-2022-2274 OpenSSL Vulnerabilities, Timing Side-Channel

Do Son January 28, 2026

The maintainers of OpenSSL, the cryptographic library that underpins a vast portion of the secure web, have...

Security Tightens: Let’s Encrypt Will Cap Certificate Validity at 45 Days by 2028 Let's Encrypt subscriber agreement Let's Encrypt OCSP Support 45-Day Certificate Limit Let's Encrypt Automation

Do Son December 3, 2025

Apple previously submitted a proposal to the CA/Browser Forum — the industry body governing certificate authorities and...

Firefox Switches to CRLite, Ditching OCSP for Better Speed and Privacy Firefox 32-bit Linux Firefox, CRLite Firefox 141, AI Tab Groups Firefox Focus Android

Do Son August 20, 2025

The Mozilla Foundation recently announced on its official blog the deployment of the CRLite digital certificate revocation...

NGINX Makes HTTPS Easier Than Ever with New ACME Module NGINX heap buffer overflow vulnerability NGINX Vulnerability Buffer Overflow CVE-2024-24989, CVE-2024-24990 NGINX ACME

Do Son August 14, 2025

The asynchronous framework server software and reverse proxy NGINX has recently announced the release of an ACME...

Good News! Let’s Encrypt Begins Testing IP-Only Certificates — No Domain Needed Merkle Tree Certificates Let's Encrypt 45-Day Certificates ACME Profile Updates 2026 Let’s Encrypt Generation Y, 45-Day TLS Certificates Let's Encrypt, IP Certificates Certificate Revocation Lists

Do Son June 27, 2025

The free digital certificate authority Let’s Encrypt previously announced plans to offer certificates based solely on IP...

Do Son June 13, 2025

A recently disclosed vulnerability in the PostgreSQL JDBC Driver (PgJDBC) could allow attackers to intercept database connections...