Cybersecurity

A C D G I N S

Co Cy

Artificial intelligence (AI)

Cloud Computing & Cloud Technology

IT infrastructure

Learn programming

Programming Languages & Frameworks

Software Architecture

Software development

Unkategorisiert

Compromised CA Keys, Revoked Certificates – How Do We Verify That Revocation Really Works

Sascha Block2026-11-02T17:49:45+01:00Categories: IT Security|Tags: Auditability, Browser Security, CA Bundle, Certificate Authorities, Certificate Authority, Certificate Chains, Certificate Forgery, Certificate Revocation, Certificate Revocation List, Certificate Transparency, Certificate Validation, Code Signing, Code Signing Certificates, Compromised CA Keys, Compromised Private Keys, CRL, Cryptographic Keys, Cryptographic Vulnerabilities, CT Logs, curl, Cybersecurity, CycloneDX, digital certificates, Digital Signatures, Digital sovereignty, Digital Trust, eMudhra, eMudhra Security Incident, Git, Git-native Evidence, HTTPS, Identity Spoofing, Intermediate CA, IT Security, JetBrains, Key Generation, MacOS, Malware, Man-in-the-Middle, MITM, OCSP, Open Source Security, PKI, Public Key Infrastructure, Reproducible Security Testing, Revocation, Root CA, Root Store, Rust, rustls, rustls-webpki, SBOM, Secure by Design, Security Evidence, Security-by-Design, Software Signatures, Software Supply Chain, Supply Chain Security, TLS, TLS certificates, TLS Trust Validation, Trust Anchor, Trust Store, webpki-roots, Website Impersonation, X.509, Zero Trust|

Compromised CA Keys, Revoked Certificates - How Do We Verify That Revocation Really Works - eMudhra Security Incident: Eight compromised CA keys raise a fairly fundamental question for many of us in October 2026: "What's the point of revoking a certificate if applications keep trusting it anyway?"

Jetzt weiterlesen

Cyberattack on Microsoft – Fact-based analysis of the attack vectors

Sascha Block2024-01-22T19:50:34+01:00Categories: IT infrastructure, IT Security|Tags: APT29, Counterintelligence, Cozy Bear, Cyber attack, Cyber attack prevention, Cyber threat, Cyberattack, Cybersecurity, Data exfiltration, Data leak, E-mail compromise, Hacker, Industrial espionage, IT infrastructure, IT Security, Microsoft, Midnight Blizzard, Multi-factor authentication, Network Security, Nobelium, Password Spraying, Phishing, Russian secret service, Security gap, Security measures, Security response, Social engineering, SVR|

Cyberattack on Microsoft - Fact-based analysis of the attack vectors. The most recent example of a sophisticated cyberattack is the cyberattack on Microsoft. This new IT hack on widely used standard software proves how vulnerable even leading technology companies with advanced security systems can be. Cyberattacks such as the one on Microsoft infrastructures are exemplary and must be regarded as a generally valid call for proactive protection in favor of robust cybersecurity architectures due to the widespread use of software solutions.

Jetzt weiterlesen

Diese Website verwendet Cookies und Dienste von Drittanbietern. Hier findest Du Deine individuellen Datenschutz-Einstellungen Ok Individuelle Einstellungen

Cookies von Drittanbietern

YouTube
Facebook
Flickr
X
Custom Tracking Code