Threatpost

DECEMBER 9, 2019

A platform that allows online applications for copies of birth certificates did not store its data properly.

62

62

The Last Watchdog

OCTOBER 26, 2021

Our Public Key Infrastructure is booming but also under a strain that manual certificate management workflows are not keeping up with. PKI and digital certificates were pivotal in the formation of the commercial Internet, maturing in parallel with ecommerce. Certificate confusion.

Digital transformation 214

Digital transformation eCommerce Internet Internet 214

Tech Republic Security

SEPTEMBER 20, 2023

SSL certificates are essential for encrypting traffic between systems such as clients, which access servers via web browsers or applications that communicate with remote systems. Certificates protect client and server data, commonly involving confidential information such as credit card details or social security numbers.

Encryption 91

Encryption 91

BH Consulting

AUGUST 31, 2022

Since the EU General Data Protection Regulation came into force in May 2018, there hasn’t yet been a way to prove compliance with it. Luxembourg’s GDPR-CARPA is the first officially recognised certification scheme to be adopted under the regulation. So why has it taken this long for a GDPR certification scheme to launch?

Data privacy 127

Data privacy Data breaches Government Accountability 127

The Last Watchdog

APRIL 21, 2021

Someone reportedly forgot to renew Spotify’s TLS certificate. The outage lasted about an hour, until the certificate in question got renewed. If Spotify has an excuse, it is that the complexity of issuing and managing digital certificates has become prodigious. Here are key takeaways: PKI on centerstage.

Digital transformation 211

Digital transformation Encryption Authentication Government 211

Security Boulevard

JULY 10, 2023

Enterprise businesses must implement the right technologies and procedures to build trust and protect their data. What Is PKI: Purpose, Components, and Key Concepts PKI is a set of policies, procedures, and technologies for creating, distributing, storing, and revoking digital certificates. Here's what PKI is and how it works.

Authentication 98

Authentication Encryption VPN Technology 98

The Last Watchdog

AUGUST 1, 2023

1, 2023– AppViewX , a leader in automated machine identity management (MIM) and application infrastructure security, today announced the results of a research study conducted by Enterprise Management Associates (EMA) on SSL/TLS Certificate Security. New York, NY, Aug. A full copy of the AppViewX sponsored report is available here.

Internet 100

Internet Internet Healthcare Banking 100

NetSpi Technical

NOVEMBER 16, 2023

Next, we decoded the Base64 data and wrote it to a file. $b64 Investigating the certificate information in our certificate store, we noted that the “Issued to:” GUID matched the Managed Identity’s Service Principal ID (b1abdc5c-3e68-476a-9191-428c1300c50c).

Encryption 136

Encryption Accountability Penetration Testing Authentication 136

Tech Republic Security

SEPTEMBER 13, 2021

SSL certificates are an integral component in securing data and connectivity to other systems. Learn tips on how you can use the Linux openssl command to find critical certificate details.

153

153

NetSpi Technical

FEBRUARY 28, 2024

As part of this, we’ve taken some time to dive into each component of the Batch service to help identify any potential areas for misconfigurations and sensitive data exposure. It’s unclear how long those certificates will stick around after they’ve been deprecated, so your mileage may vary. PSPath -FilePath (-join($_.PSChildName,'.pfx'))

Accountability 95

Accountability Passwords Penetration Testing Authentication 95

Tech Republic Security

DECEMBER 12, 2022

Train for cybersecurity certifications as you need them to advance through an entire career. The post Protect your most valuable data forever for only $70 — don’t miss this deal appeared first on TechRepublic.

Cybersecurity 142

Cybersecurity 142

Security Boulevard

FEBRUARY 1, 2024

In the ever-evolving landscape of cybersecurity, the choice of cryptographic algorithms and certificates plays a pivotal role in ensuring the confidentiality and integrity of sensitive information. The post Improving Cybersecurity: Different Certifications Explained appeared first on Security Boulevard.

Cybersecurity 61

Cybersecurity 61

Security Affairs

JANUARY 31, 2023

GitHub confirmed that threat actors exfiltrated encrypted code signing certificates for some versions of GitHub Desktop for Mac and Atom apps. GitHub this week disclosed a security breach, threat actors exfiltrated encrypted code signing certificates for some versions of GitHub Desktop for Mac and Atom apps. and Atom versions 1.63.0-1.63.1.

Encryption 92

Encryption Hacking Accountability Data breaches 92

The Last Watchdog

AUGUST 8, 2023

8, 2023 – DigiCert today announced the expansion of its certificate management platform, DigiCert Trust Lifecycle Manager, to provide full lifecycle support for multiple CAs including Microsoft CA and AWS Private CA, as well as integration with ServiceNow to support existing IT service workflows. Lehi, Utah, Aug.

Authentication 100

Authentication Technology VPN Software 100

Adam Levin

JULY 19, 2019

Under a new directive effective 7/17, the Kazakhstan government is requiring every internet service provider in the country to install a security certificate onto every internet-enabled device and browser. Once installed, this certificate allows the government to decrypt and analyze all incoming internet traffic. .

Internet 190

Internet Internet Government Banking 190

TrustArc

JULY 19, 2023

Is a EU-US Data Privacy Framework verification right for your business? Obtaining a certification enables your business to transfer personal data from the EU to the US. The post Why Your Business Needs an EU-US Data Privacy Framework Verification appeared first on TrustArc Privacy Blog.

Data privacy 98

Data privacy Risk 98

Security Boulevard

APRIL 8, 2023

FedRAMP High authorizations are required for commercial cloud services that must satisfy federal mission requirements with highly sensitive data. FedRAMP High Compliance and Certification Explained appeared first on Security Boulevard. The post What is FedRAMP High P-ATO?

121

121

IT Security Guru

JUNE 30, 2023

The huge increase in cyberattacks across various sectors has fuelled a demand for skilled individuals who can safeguard data for businesses. Post-graduation, professionals often turn to specialised courses and certifications to stay ahead of the curve.

Cybersecurity 99

Cybersecurity Cyber threats Penetration Testing Education 99

Tech Republic Security

MARCH 7, 2022

A recent cyberattack has compromised a large amount of Nvidia’s data, including a pair of digital-signing certificates. Here’s what's at stake and how to react. The post Nvidia’s breach might help cybercriminals run malware campaigns appeared first on TechRepublic.

Malware 151

Malware 151

Security Boulevard

JULY 23, 2021

PKI manages the digital certificates that encrypt sensitive data, secures web browsing (SSL/TLS), validates the integrity of software and electronic devices through code signing, The post Understanding Certificate Policies and Practice Statements appeared first on Security Boulevard.

Encryption 108

Encryption Technology Software Authentication 108

Security Boulevard

JANUARY 14, 2024

The Payment Card Industry Data Security Standard (PCI DSS) was developed by the five major payment card brands that formed the Payment Card Industry Security Standards […] The post How to Get PCI DSS Certification? The post How to Get PCI DSS Certification? appeared first on Centraleyes. appeared first on Security Boulevard.

61

61

CSO Magazine

SEPTEMBER 2, 2021

What is the CDPSE certification? The Certified Data Privacy Solutions Engineer (CDPSE) certification focuses on the implementation of privacy solutions, from both a technical and governance perspective. The organization rolled out the new certification because of what they perceived as a gap in the industry landscape.

Engineering 121

Engineering Data privacy Government Marketing 121

Security Boulevard

DECEMBER 10, 2023

SOC 2 is the gold standard in Information Security certifications and shows the world just how seriously your company takes Information Security. An incredible way to systematically evaluate and improve your company’s handling of customer data throughout its lifecycle, the SOC 2 certificate is equally challenging and worthwhile to attain.

Information Security 65

Information Security 65

Zero Day

NOVEMBER 5, 2021

Analysis reveals hidden risks for organizations that do not monitor their certificate usage.

Risk 75

Risk 75

Security Boulevard

NOVEMBER 22, 2023

With fewer IT resources, it's harder to identify and fix issues immediately, leading to vulnerabilities and giving hackers a bigger window to infiltrate your systems or exfiltrate data. Automate digital certificate renewals Expired digital certificates  (e.g., The frantic pace often causes people to let their guard down.

CISO 65

CISO Cybersecurity Phishing Backups 65

Security Affairs

NOVEMBER 24, 2023

Almost a million files with minors’ data, including home addresses and photos were left open to anyone on the internet, posing a threat to children. Leaking private data on the internet, in this case, poses a grave risk, as most of the leaked files expose minors.

Identity Theft 121

Identity Theft Internet Internet Education 121

CSO Magazine

AUGUST 19, 2021

What is the CCSP certification? CCSP is a cloud-focused security certification for experienced security pros offered by the International Information System Security Certification Consortium, or (ISC) 2. To read this article in full, please click here

Cybersecurity 128

Cybersecurity 128

CyberSecurity Insiders

JUNE 30, 2021

Earlier this week, (ISC)² announced that the DoD approved both the HCISPP and CCSP certifications to its DoD 8570 Approved Baseline Certifications table on the DoD Cyber Exchange website. These certifications attest that their holders have broad, experience-based mastery of security concepts in real-world situations.

Cybersecurity 122

Cybersecurity Healthcare Engineering Government 122

eSecurity Planet

APRIL 14, 2023

Hackers accessed a range of company assets and stole about 10 terabytes of data, but the disclosure with the greatest potential for damage is that the hackers claim to have the ability to impersonate WDC code-signing certificates. Two security researchers also looked at the file and agreed it is signed with the company’s certificate.”

Cyber Attacks 110

Cyber Attacks Firmware Marketing Authentication 110

Security Boulevard

MARCH 22, 2024

stands as a strong and reliable guardian of data integrity and confidentiality. It has been used for decades to enable secure access to remote devices and servers over an […] The post Why SSH Certificates Can Be A Better Option For Remote Access Than SSH Keys appeared first on Security Boulevard.

Internet 61

Internet Internet Authentication 61

CyberSecurity Insiders

FEBRUARY 28, 2021

Tinder, the most popular dating app among millennials has achieved for the first time a certification in Information Security Management System that endorses that the user data on the company servers remains well protected from all kinds of cyber threats. million pay subscribers till the end of 2019.

Information Security 95

Information Security Data privacy Scams Cyber threats 95

Security Boulevard

JULY 17, 2023

Digital certificates are a critical component in any cybersecurity strategy. They help mitigate organizations' ever-growing risk exposure by establishing digital trust and acting as a barrier to unauthorized access, fraudulent online activities, system outages, and data breaches.

Risk 52

Risk Data breaches Encryption Authentication 52

Malwarebytes

MARCH 15, 2022

The ensuing data leak included two of NVIDIA’s code signing certificates. Those certificates are now being used to sign malware. Leaked signing certificates from major vendors like Nvidia come with huge security implications. And the fact that the certificates have expired does not lessen the burden much.

Malware 97

Malware System Administration Software Ransomware 97

BH Consulting

APRIL 17, 2024

Good understanding of security assurance testing related data protection/privacy considerations. Industry experience and certifications may be considered in lieu. Professional security certification, such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP) etc. is required.

Cybersecurity 89

Cybersecurity Penetration Testing Software Backups 89

CyberSecurity Insiders

AUGUST 11, 2021

Chief Information Security Officer (CISO) Luis Gonsalves, Head of Security for Portugal’s central bank, and founder of the Cloud Security Alliance’s Portugal Chapter, says Certified Cloud Security Professional (CCSP) stands out from other technical certifications. That’s the real differentiator ,” he says. Read the Full Article.

CISO 140

CISO Data privacy Banking Risk 140

Security Boulevard

JULY 13, 2021

SSL Certificates are landmarks for data security. From securing data in transit to enhancing customer trust and improving search rankings, SSL certificates are indispensable for all kinds of organizations, regardless. The post Multi-Domain SSL – Comprehensive SSL Security for Business Websites appeared first on Indusface.

Network Security 112

Network Security 112

Dark Reading

SEPTEMBER 8, 2023

Google shortened the lifetime of Transport Layer Security (TLS) certificates, and Microsoft plans to downgrade support for older versions, giving companies more data security but also removing visibility into their own traffic.

107

107