Less than 2 weeks earlier, the United States Cybersecurity & & Infrastructure Security Agency and also FBI launched a joint advising concerning the risk of ransomware assaults from a gang that calls itself “Cuba.”...
Senators noted the alleged lack of security of Australia’s COVID-19 digital certificates, criticizing the certificate for being easily forged through man-in-the-middle cyber attacks. click here to read full Article Read More on latest vulnerability...
Cybersecurity researchers have disclosed details of an evasive malware campaign that makes use of valid code signing certificates to sneak past security defenses and stay under the radar with the goal of deploying Cobalt...
According to reports, some form of NCSC-accredited certification for managed service providers (MSPs) and cloud firms seems likely to become mandatory in the medium term. click here to read full Article Read More on...
[*] A tool which creates a spoof code signing certificates and sign binaries and DLL files to help evade EDR products and avoid MSS and sock scruitney. LimeLighter can also use valid code signing...
The NSA clued in organizations against the use of wildcard TLS certificates that may lead to a widespread attack on an organization, as well as invite the new ALPACA TLS attack. According to researchers,...
ForgeCert uses the BouncyCastle C# API and a stolen Certificate Authority (CA) certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1...
The NSA urged organizations to follow the technical advice included in its advisory and secure servers against scenarios where attackers could gain access and decrypt encrypted web traffic. click here to read full Article...
It is not uncommon organizations to implement an internal certification authority in order to establish trust between entities (users, computers etc.) or utilize it for… Continue reading → Account Persistence – Certificates click here to...
The SolarWinds supply chain attackers manipulated OAuth app certificates to maintain persistence and access privileged resources including email, according to researchers at Proofpoint. click here to read full Article Read more on Malware updates...
Forged negative COVID-19 test results and fake vaccine certificates are being offered on the dark web forums for people seeking to board flights, cross borders, attend events or start new jobs. click here to...
Roll out IoT device certificates to boost network security click here to read full Article Read More on latest Security Updates
In accordance with ISO 17442-2, the CA Stakeholder Group will develop and promote best practice guidelines and use cases for LEI integration across the digital identity industry. click here to read full Article Read...
Starting today, the lifespan of new TLS certificates will be limited to 398 days, a little over a year, from the previous maximum certificate lifetime of 27 months (825 days). In a move that’s...
