Tag: TLS
-
WeChat devs introduced security flaws when they modded TLS, say researchers
Messaging giant WeChat uses a network protocol that the app’s developers modified – and by doing so introduced security weaknesses, …
-
Google calls for halting use of WHOIS for TLS domain verifications
Certificate authorities and browser makers are planning to end the use of WHOIS data verifying domain ownership following a report that …
-
Mandiant uncovers critical privilege escalation vulnerability in Azure Kubernetes service
Google LLC’s Mandiant has published details of a critical privilege escalation vulnerability found in Microsoft Corp.’s Azure …
-
TLS bootstrap attack gains access to Azure Kubernetes Services cluster
A bug was discovered that could let an attacker with access to a vulnerable Microsoft Azure Kubernetes Services (AKS) cluster escalate …
-
Shorter TLS certificate lifespans expected to complicate management efforts
76% of security leaders recognize the pressing need to move to shorter certificate lifespans to improve security, according to Venafi. …
-
Mozilla follows Google in losing trust in Entrust’s TLS certificates
Mozilla is following in Google Chrome’s footsteps in officially distrusting Entrust as a root certificate authority (CA) following what it …
-
Venafi launches 90-Day TLS Readiness Solution
Venafi launched its new 90-Day TLS Readiness Solution to help organizations comply with Google’s proposed 90-day TLS certificate …
-
Axellio’s Scott Aken Calls for Changes to Network Traffic Monitoring Amid TLS 1.3 Implementation
Organizations will have to augment their approaches to network traffic monitoring when they implement Transport Layer Security 1.3, …
-
TLS inspection configuration for encrypted egress traffic and AWS Network Firewall
AWS Security Blog TLS inspection configuration for encrypted egress traffic and AWS Network Firewall In the evolving landscape of network …
-
AWS Certificate Manager will discontinue WHOIS lookup for email-validated certificates
AWS Certificate Manager will discontinue WHOIS lookup for email-validated certificates AWS Certificate Manager (ACM) is a managed service …
-
How to implement client certificate revocation list checks at scale with API Gateway
ityAs you design your Amazon API Gateway applications to rely on mutual certificate authentication (mTLS), you need to consider how your …
●●●