Latest Certificates news

Microsoft Sharepoint outage caused by use of wrong TLS certificate

Microsoft Sharepoint and OneDrive for Business were briefly interrupted today after a German TLS certificate was mistakenly added to the main .com domains for the Microsoft 365 services.
- Lawrence Abrams
- July 24, 2023
- 06:46 PM
- 0
Emsisoft says hackers are spoofing its certs to breach networks

A hacker is using fake code-signing certificates impersonating cybersecurity firm Emsisoft to target customers using its security products, hoping to bypass their defenses.
- Bill Toulas
- February 15, 2023
- 12:01 PM
- 0
The Week in Ransomware - December 16th 2022 - Losing Trust

Today's Week in Ransomware brings you the latest news and stories about the cyberattacks, new tactics, and reports related to ransomware operations.
- Lawrence Abrams
- December 16, 2022
- 05:59 PM
- 0
Samsung, LG, Mediatek certificates compromised to sign Android malware

Multiple platform certificates used by Android OEM device vendors to digitally sign core system applications have also been used to sign Android apps containing malware.
- Sergiu Gatlan
- December 01, 2022
- 09:43 PM
- 1
Wolf in sheep’s clothing: how malware tricks users and antivirus

One of the primary methods used by malware distributors to infect devices is by deceiving people into downloading and running malicious files, and to achieve this deception, malware authors are using a variety of tricks.
- Bill Toulas
- August 02, 2022
- 12:00 PM
- 1
Russia creates its own TLS certificate authority to bypass sanctions

Russia has created its own trusted TLS certificate authority (CA) to solve website access problems that have been piling up after sanctions prevent certificate renewals.
- Bill Toulas
- March 10, 2022
- 11:06 AM
- 3
Malware now using NVIDIA's stolen code signing certificates

Threat actors are using stolen NVIDIA code signing certificates to sign malware to appear trustworthy and allow malicious drivers to be loaded in Windows.
- Lawrence Abrams
- March 05, 2022
- 03:45 PM
- 4
Experts urge EU not to force insecure certificates in web browsers

A group of 38 cybersecurity professors and IT experts worldwide, together with the Electronic Frontier Foundation (EFF), have cosigned a letter to EU regulators that warns of a proposal that could expose internet users to cybercrime.
- Bill Toulas
- March 04, 2022
- 03:00 PM
- 0
Stealthy BLISTER malware slips in unnoticed on Windows systems

Security researchers have uncovered a malicious campaign that relies on a valid code-signing certificate to disguise malicious code as legitimate executables.
- Ionut Ilascu
- December 23, 2021
- 05:33 PM
- 0
Windows 11 KB5008295 emergency update fixes built-in app mess

Microsoft has released the KB5008295 out-of-band update to address Windows 11 issues while opening or using some built-in apps and features due to an expired Microsoft digital certificate.
- Sergiu Gatlan
- November 05, 2021
- 01:52 PM
- 2
Some Windows 11 apps are broken due to expired certificate

Microsoft says Windows 11 users might experience issues opening or using some built-in apps and features due to an expired digital certificate.
- Sergiu Gatlan
- November 03, 2021
- 07:28 AM
- 0
NSA warns of wildcard certificate risks, provides mitigations

The U.S. National Security Agency (NSA) is warning of the dangers stemming from the use of broadly-scoped certificates to authenticate multiple servers in an organization. These include a recently disclosed ALPACA technique that could be used for various traffic redirect attacks.
- Ionut Ilascu
- October 12, 2021
- 02:23 AM
- 0
Malware devs trick Windows validation with malformed certs

Google researchers spotted malware developers creating malformed code signatures seen as valid in Windows to bypass security software.
- Sergiu Gatlan
- September 23, 2021
- 12:24 PM
- 0
Hacked sites push TeamViewer using fake expired certificate alert

Threat actors are compromising Windows IIS servers to add expired certificate notification pages that prompt visitors to download a malicious fake installer.
- Sergiu Gatlan
- September 20, 2021
- 04:15 PM
- 0
Microsoft Teams bug is prompting users to select a certificate

A recent Microsoft Teams update is causing a "Select a certificate" prompt to be displayed to Teams users before they can use the software.
- Lawrence Abrams
- June 10, 2021
- 11:12 AM
- 0
Microsoft Exchange admin portal blocked by expired SSL certificate

The Microsoft Exchange admin portal is currently inaccessible from some browsers after Microsoft forgot to renew the SSL certificate for the website.
- Lawrence Abrams
- May 23, 2021
- 03:21 PM
- 0
Amex cards removed from Google Pay due to expired certificate

An expired certificate has led to the repeated removal of linked American Express credit cards from user's Google Pay accounts.
- Lawrence Abrams
- April 16, 2021
- 09:49 AM
- 0
Pulse Secure VPN users can't login due to expired certificate

Users worldwide cannot connect to Pulse Secure VPN devices after a code signing certificate used to digitally sign and verify software components has expired.
- Lawrence Abrams
- April 12, 2021
- 11:05 AM
- 1
Linux Foundation unveils Sigstore — a Let's Encrypt for code signing

The Linux Foundation, Red Hat, Google, and Purdue have unveiled the free 'sigstore' service that lets developers code-sign and verify open source software to prevent supply-chain attacks.
- Lawrence Abrams
- March 10, 2021
- 03:49 PM
- 1
Recent Google Voice outage caused by expired certificates

In an incident report published on Friday, Google said that a Google Voice outage affecting a majority of the telephone service's users earlier this month was caused by expired TLS certificates.
- Sergiu Gatlan
- February 28, 2021
- 09:25 AM
- 0