- Virus alerts
- By Catalin Cimpanu
- September 27th, 2016
New Android Mobile Banking Trojan Emerges in South Korea
Trojan spread disguised as an Android antivirus app
- Security
- By Catalin Cimpanu
- August 9th, 2016
Researchers Hide Malware Inside Digitally Signed Files Without Breaking Hashes
New technique makes malware detection almost impossible
- Security
- By Catalin Cimpanu
- March 24th, 2016
Malware Is Now Signed with Dual Certificates, for SHA1 and SHA2
Malware authors are keeping pace with recent CA changes
- Server related
- By Catalin Cimpanu
- March 4th, 2016
Server Snafu Makes Microsoft Beg for CA Audit Data from Its Partners
Server errors lose data about 147 root cert CA audits
- Spyware Threats
- By Catalin Cimpanu
- January 10th, 2016
Spymel Info-Stealing Trojan Evades Antivirus Detection via Stolen Certificates
Zscaler researchers discover yet another malware family hiding with the help of stolen digital certificates
- Apple & Mac Blog
- By Catalin Cimpanu
- November 12th, 2015
Epic Fail: Expired Certificate Causes Chaos in Apple's App Store
Apple issues new certificate, everything is back to normal
- Security
- By Ionut Ilascu
- April 30th, 2015
Instagram’s SSL/TLS Certificate Just Expired, Security Warnings Pop Up
The problem seems limited to Instagram website
- Security
- By Ionut Ilascu
- April 6th, 2015
Google Certificate Expires, Email Clients Return Security Warnings
Someone forgot to renew a certificate, Gmail affected
- Security
- By Ionut Ilascu
- April 2nd, 2015
Google to Remove Trust in Chinese Root CA Due to Lack of Transparency
CNNIC can be re-included if control mechanisms are added
- Security
- By Ionut Ilascu
- March 26th, 2015
Microsoft Revokes Rogue Digital Certificate for Google and Other Web Domains
Company works on an update for Windows Server 2003
- Security
- By Ionut Ilascu
- March 24th, 2015
Unauthorized Certificates Issued for Several Google Domains
Chrome, Firefox users protected to some degree
- Security Blog
- By Ionut Ilascu
- March 4th, 2015
Firefox 37 to Feature New Certificate Revocation Mechanism
Now, OneCRL works only with intermediate certificates
- Security
- By Ionut Ilascu
- February 19th, 2015
Crypto Key Encrypting Superfish Root Certificate Has Been Cracked
After some tweaks, the password popped up in 10 seconds
- Incidents
- By Ionut Ilascu
- December 10th, 2014
Researcher Signs Malware with Sony Certificate, Uploads It to Virus Total
Dozens of Sony certificates are in the public domain
- Security
- By Ionut Ilascu
- October 15th, 2014
Trading of Rogue Code Signing Certificates Increases on Underground Forums
Russian sells at least one digital certificate per week
- Security
- By Ionut Ilascu
- October 10th, 2014
HP to Revoke Certificate Used to Sign Malware in 2010
HP's certificate authority was not compromised
- Security
- By Ionut Ilascu
- September 29th, 2014
All CloudFlare Customers Benefit from Universal SSL
Feature supports SPDY protocol for improved web performance