A ccTLD registry hijack of .gh, .sl, and .as let attackers obtain rogue TLS certificates. See how Chrome responded and how to check yours.
TLS Certificates
Let’s Encrypt moves to Generation Y roots, launches IP address certificates, and sets a path for 45-day lifetimes by 2028. Is your automation ready?
Cloudflare’s 1.1.1.1 was hit by 12 unauthorized certificates from Fina CA, raising PKI concerns and spotlighting Microsoft’s continued trust.
Three anomalous TLS certificates were improperly issued for Cloudflare’s 1.1.1.1 DNS. The certificates were trusted by Microsoft and went undetected for months.
Learn about a significant security flaw in TLS certificate issuance process, exposing vulnerabilities in domain verification methods.