Artificial Intelligence OpenAI Hit by TanStack Supply Chain Attack Two employee devices were compromised in the attack, and credential material was stolen from OpenAI code repositories. Ionut ArghireMay 15, 2026
Data Breaches DigiCert Revokes Certificates After Support Portal Hack Hackers delivered malware via a customer chat channel, infected an analyst’s system, and accessed the internal support portal. Ionut ArghireMay 4, 2026
Data Protection Google Working Towards Quantum-Safe Chrome HTTPS Certificates The internet giant is developing an evolution of the certificates based on Merkle Tree Certificates (MTCs). Ionut ArghireMarch 2, 2026
Endpoint Security Microsoft to Refresh Windows Secure Boot Certificates in June 2026 After a decade and a half of service, the current certificates will expire, and new ones will be rolled out. Ionut ArghireFebruary 11, 2026
Ransomware Microsoft Revokes Over 200 Certificates to Disrupt Ransomware Campaign The tech giant attributed the attacks to Vanilla Tempest, also known as Vice Spider and Vice Society. Eduard KovacsOctober 16, 2025
Data Protection Chrome to Distrust Chunghwa Telecom and Netlock Certificates Patterns of concerning behavior led Google to remove trust in certificates from Chunghwa Telecom and Netlock from Chrome. Ionut ArghireJune 2, 2025
Vulnerabilities SSL.com Scrambles to Patch Certificate Issuance Vulnerability A vulnerability in SSL.com has resulted in nearly a dozen certificates for legitimate domains being wrongly issued. Ionut ArghireApril 22, 2025
Data Protection New Issuance Requirements Improve HTTPS Certificate Validation HTTPS certificate issuance now requires Multi-Perspective Issuance Corroboration and linting to improve validation. Ionut ArghireMarch 28, 2025
Government US Gov Removing Four-Year-Degree Requirements for Cyber Jobs The US government will remove "unnecessary degree requirements" in favor of skills-based hiring to help fill 500,000 open cybersecurity jobs. SecurityWeek NewsSeptember 6, 2024
Incident Response DigiCert Revoking 83,000 Certificates of 6,800 Customers DigiCert has started revoking 83,000 certificates impacted by a validation issue, but critical infrastructure customers are asking for more time. Eduard KovacsAugust 1, 2024
Identity & Access Machine Identity Firm Venafi Readies for the 90-day Certificate Lifecycle Venafi introduced a 90-Day TLS Readiness solution to help enterprises prepare for Google’s proposed 90-day limit for the lifecycle of a digital certificate. Kevin TownsendMay 1, 2024
Cybercrime Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals Microsoft has revoked signed drivers used for post-exploitation activity, in many cases by Chinese cybercriminals. Eduard KovacsJuly 12, 2023