Do Son Microsoft Defender erroneously flagged DigiCert root certificates as "Cerdigicert" malware. Discover the fix and how to restore your system's trusted root store.
SSL/TLS
GnuTLS v3.8.13 fixes critical heap overwrites, identity truncation, and OCSP bypasses. Secure your Linux comms and upgrade to the latest version now.
GnuTLS v3.8.12 fixes high-severity DoS flaws (CVE-2026-1584). Malicious TLS 1.3 handshakes can crash servers. Update now to prevent outages.
OpenSSL patches 12 flaws, including high-severity CVE-2025-15467 allowing pre-auth RCE via CMS. Update to 3.6.1/3.0.19 immediately to secure systems.
Following Apple's push, Let's Encrypt will cap all certificate validity at 45 days by 2028. Users must ensure automation is compatible with the significantly shorter lifetime.
Firefox is switching to CRLite for certificate revocation, a major change that improves security and privacy by eliminating the need for real-time OCSP queries.
NGINX's new ACME module automates SSL/TLS certificate management, allowing users to request and renew certificates directly from the NGINX configuration.
Let’s Encrypt is now testing IP-only digital certificates, offering a free alternative for securing IP addresses without domains, valid for six days with automated renewal.
A flaw (CVE-2025-49146) in PostgreSQL JDBC Driver allows MITM attacks even with channel binding enabled. Upgrade to v42.7.7 or use sslMode=verify-full.