home.social

#digicert — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #digicert, aggregated by home.social.

fetched live
  1. Daily CyberSecurity @[email protected] ·

    Golden Gh0st RAT let GoldenEyeDog subgroup CylindricalCanine steal DigiCert code-signing certificates and slip past Windows SmartScreen.

    #GoldenGh0stRAT #CylindricalCanine #DigiCert #CodeSigning #Malware

    meterpreter.org/golden-gh0st-r

    #goldengh0strat #cylindricalcanine #digicert #codesigning #malware
  2. Daily CyberSecurity @[email protected] ·

    Golden Gh0st RAT let GoldenEyeDog subgroup CylindricalCanine steal DigiCert code-signing certificates and slip past Windows SmartScreen.

    #GoldenGh0stRAT #CylindricalCanine #DigiCert #CodeSigning #Malware

    meterpreter.org/golden-gh0st-r

    #malware #codesigning #digicert #cylindricalcanine #goldengh0strat
  3. Jerry on Mastodon @[email protected] ·

    Just about the entire internet uses certificate authorities to establish trust. Here, a simple old-school social engineering trick broke this trust and allowed hackers to get signed certificates from DigiCert for their malware.

    There is a better way to establish certificate trust that doesn't rely on a 3rd party, and it's free too. It's called DANE, which binds the trust directly to the Domain Name System by using DNSSEC. DANE is ideal for code signing certificates (and other uses), but is overlooked.

    This attack is virtually impossible under DANE. A vulnerable support person is of no use. Hackers would need to directly compromise the target's DNS infrastructure, the registrar, and the top-level domain authority. All three. Nearly impossible compared to just finding some dupe at the CA in a public chat room.

    hackread.com/hackers-digicert-

    #DANE #CertificateAuthorities #DigiCert

    #dane #certificateauthorities #digicert
  4. Jerry on Mastodon @[email protected] ·

    Just about the entire internet uses certificate authorities to establish trust. Here, a simple old-school social engineering trick broke this trust and allowed hackers to get signed certificates from DigiCert for their malware.

    There is a better way to establish certificate trust that doesn't rely on a 3rd party, and it's free too. It's called DANE, which binds the trust directly to the Domain Name System by using DNSSEC. DANE is ideal for code signing certificates (and other uses), but is overlooked.

    This attack is virtually impossible under DANE. A vulnerable support person is of no use. Hackers would need to directly compromise the target's DNS infrastructure, the registrar, and the top-level domain authority. All three. Nearly impossible compared to just finding some dupe at the CA in a public chat room.

    hackread.com/hackers-digicert-

    #DANE #CertificateAuthorities #DigiCert

    #dane #certificateauthorities #digicert
  5. Jerry on Mastodon @[email protected] ·

    Just about the entire internet uses certificate authorities to establish trust. Here, a simple old-school social engineering trick broke this trust and allowed hackers to get signed certificates from DigiCert for their malware.

    There is a better way to establish certificate trust that doesn't rely on a 3rd party, and it's free too. It's called DANE, which binds the trust directly to the Domain Name System by using DNSSEC. DANE is ideal for code signing certificates (and other uses), but is overlooked.

    This attack is virtually impossible under DANE. A vulnerable support person is of no use. Hackers would need to directly compromise the target's DNS infrastructure, the registrar, and the top-level domain authority. All three. Nearly impossible compared to just finding some dupe at the CA in a public chat room.

    hackread.com/hackers-digicert-

    #DANE #CertificateAuthorities #DigiCert

    #dane #certificateauthorities #digicert
  6. Jerry on Mastodon @[email protected] ·

    Just about the entire internet uses certificate authorities to establish trust. Here, a simple old-school social engineering trick broke this trust and allowed hackers to get signed certificates from DigiCert for their malware.

    There is a better way to establish certificate trust that doesn't rely on a 3rd party, and it's free too. It's called DANE, which binds the trust directly to the Domain Name System by using DNSSEC. DANE is ideal for code signing certificates (and other uses), but is overlooked.

    This attack is virtually impossible under DANE. A vulnerable support person is of no use. Hackers would need to directly compromise the target's DNS infrastructure, the registrar, and the top-level domain authority. All three. Nearly impossible compared to just finding some dupe at the CA in a public chat room.

    hackread.com/hackers-digicert-

    #DANE #CertificateAuthorities #DigiCert

    #digicert #certificateauthorities #dane
  7. Jerry on Mastodon @[email protected] ·

    Just about the entire internet uses certificate authorities to establish trust. Here, a simple old-school social engineering trick broke this trust and allowed hackers to get signed certificates from DigiCert for their malware.

    There is a better way to establish certificate trust that doesn't rely on a 3rd party, and it's free too. It's called DANE, which binds the trust directly to the Domain Name System by using DNSSEC. DANE is ideal for code signing certificates (and other uses), but is overlooked.

    This attack is virtually impossible under DANE. A vulnerable support person is of no use. Hackers would need to directly compromise the target's DNS infrastructure, the registrar, and the top-level domain authority. All three. Nearly impossible compared to just finding some dupe at the CA in a public chat room.

    hackread.com/hackers-digicert-

    #DANE #CertificateAuthorities #DigiCert

    #dane #certificateauthorities #digicert
  8. Bernhard Biedermann @[email protected] ·

    #DigiCert und die Sicherheit. 🙁

    Kriminelle sind kreativ wie man sehen kann:

    "On 2 April 2026, DigiCert’s support team became the target of a carefully planned attack, which allowed hackers to steal EV Code Signing certificates by simply pretending to be a customer in a help chat."

    Und wie ging es weiter:

    "While the company thought the situation was under control by 3 April, a second machine, ENDPOINT2, was also compromised on 4 April. This machine had a malfunctioning CrowdStrike sensor, which created a gap in their Endpoint Detection and Response (EDR), due to which no telemetry data reached the security team to warn them of the breach."

    Und was bedeutet das nun:

    "DigiCert revokes 60 code signing certificates after hackers used a malicious support chat attachment to sign the Zhong Stealer malware."

    Da ist also nicht ganz so sicher wie man es gerne hätte. Wünsche den Admins viel Erfolg bei den Updates. 🙂

    hackread.com/hackers-digicert-

    #digicert
  9. Hackread.com @Hackread ·

    📢⚠️ Hackers tricked support staff into executing a malicious file, allowing attackers to obtain code-signing certificates later used to sign malware. DigiCert revoked 60 certificates after the breach was reported.

    Read: hackread.com/hackers-digicert-

    #digicert #cybersecurity #malware #infosec #cyberattack #databreach
  10. Hackread.com @[email protected] ·

    📢⚠️ Hackers tricked #DigiCert support staff into executing a malicious file, allowing attackers to obtain code-signing certificates later used to sign malware. DigiCert revoked 60 certificates after the breach was reported.

    Read: hackread.com/hackers-digicert-

    #CyberSecurity #Malware #InfoSec #CyberAttack #DataBreach

    #digicert #cybersecurity #malware #infosec #cyberattack #databreach
  11. Hackread.com @[email protected] ·

    📢⚠️ Hackers tricked #DigiCert support staff into executing a malicious file, allowing attackers to obtain code-signing certificates later used to sign malware. DigiCert revoked 60 certificates after the breach was reported.

    Read: hackread.com/hackers-digicert-

    #CyberSecurity #Malware #InfoSec #CyberAttack #DataBreach

    #digicert #cybersecurity #malware #infosec #cyberattack #databreach
  12. Hackread.com @[email protected] ·

    📢⚠️ Hackers tricked #DigiCert support staff into executing a malicious file, allowing attackers to obtain code-signing certificates later used to sign malware. DigiCert revoked 60 certificates after the breach was reported.

    Read: hackread.com/hackers-digicert-

    #CyberSecurity #Malware #InfoSec #CyberAttack #DataBreach

    #databreach #cyberattack #infosec #malware #cybersecurity #digicert
  13. Hackread.com @[email protected] ·

    📢⚠️ Hackers tricked #DigiCert support staff into executing a malicious file, allowing attackers to obtain code-signing certificates later used to sign malware. DigiCert revoked 60 certificates after the breach was reported.

    Read: hackread.com/hackers-digicert-

    #CyberSecurity #Malware #InfoSec #CyberAttack #DataBreach

    #digicert #cybersecurity #malware #infosec #cyberattack #databreach
  14. kravietz 🦇 @[email protected] ·

    #LetsEncrypt has suspended issuing certificates after it identified security issues in one of its roots (!)[^1]

    We temporarily disabled certificate issuance, deployed a configuration change to prevent future issuance from the cross-signed Gen Y hierarchy, and then re-enabled issuance. Certificate revocation and CRL generation remains functional for Gen Y certificates.

    A few days ago #DigiCert was hacked with a Windows (!) screensaver (!)[^2]

    I cannot but remind that both organisations are part of the #WebTrust cartel who had last year unrolled a massive “grassroots” smear campaign against EU #QWAC certificates, presenting them as “security and privacy threat”, whereas from both legal and technical point of view QWAC is much more secure:

    https://krvtz.net/en/posts/the-real-story-behind-eu-qwac.html

    [^1]: https://community.letsencrypt.org/t/2026-05-08-gen-y-cross-certified-subordinate-cas-missing-serverauth-eku/247105

    [^2]: https://cybersecuritynews.com/digicert-hacked-screensaver/

    #digicert #letsencrypt #qwac #webtrust
  15. kravietz 🦇 @[email protected] ·

    #LetsEncrypt has suspended issuing certificates after it identified security issues in one of its roots (!)[^1]

    We temporarily disabled certificate issuance, deployed a configuration change to prevent future issuance from the cross-signed Gen Y hierarchy, and then re-enabled issuance. Certificate revocation and CRL generation remains functional for Gen Y certificates.

    A few days ago #DigiCert was hacked with a Windows (!) screensaver (!)[^2]

    I cannot but remind that both organisations are part of the #WebTrust cartel who had last year unrolled a massive “grassroots” smear campaign against EU #QWAC certificates, presenting them as “security and privacy threat”, whereas from both legal and technical point of view QWAC is much more secure:

    https://krvtz.net/en/posts/the-real-story-behind-eu-qwac.html

    [^1]: https://community.letsencrypt.org/t/2026-05-08-gen-y-cross-certified-subordinate-cas-missing-serverauth-eku/247105

    [^2]: https://cybersecuritynews.com/digicert-hacked-screensaver/

    #digicert #letsencrypt #qwac #webtrust
  16. kravietz 🦇 @[email protected] ·

    #LetsEncrypt has suspended issuing certificates after it identified security issues in one of its roots (!)[^1]

    We temporarily disabled certificate issuance, deployed a configuration change to prevent future issuance from the cross-signed Gen Y hierarchy, and then re-enabled issuance. Certificate revocation and CRL generation remains functional for Gen Y certificates.

    A few days ago #DigiCert was hacked with a Windows (!) screensaver (!)[^2]

    I cannot but remind that both organisations are part of the #WebTrust cartel who had last year unrolled a massive “grassroots” smear campaign against EU #QWAC certificates, presenting them as “security and privacy threat”, whereas from both legal and technical point of view QWAC is much more secure:

    https://krvtz.net/en/posts/the-real-story-behind-eu-qwac.html

    [^1]: https://community.letsencrypt.org/t/2026-05-08-gen-y-cross-certified-subordinate-cas-missing-serverauth-eku/247105

    [^2]: https://cybersecuritynews.com/digicert-hacked-screensaver/

    #digicert #letsencrypt #qwac #webtrust
  17. kravietz 🦇 @[email protected] ·

    #LetsEncrypt has suspended issuing certificates after it identified security issues in one of its roots (!)[^1]

    We temporarily disabled certificate issuance, deployed a configuration change to prevent future issuance from the cross-signed Gen Y hierarchy, and then re-enabled issuance. Certificate revocation and CRL generation remains functional for Gen Y certificates.

    A few days ago #DigiCert was hacked with a Windows (!) screensaver (!)[^2]

    I cannot but remind that both organisations are part of the #WebTrust cartel who had last year unrolled a massive “grassroots” smear campaign against EU #QWAC certificates, presenting them as “security and privacy threat”, whereas from both legal and technical point of view QWAC is much more secure:

    https://krvtz.net/en/posts/the-real-story-behind-eu-qwac.html

    [^1]: https://community.letsencrypt.org/t/2026-05-08-gen-y-cross-certified-subordinate-cas-missing-serverauth-eku/247105

    [^2]: https://cybersecuritynews.com/digicert-hacked-screensaver/

    #webtrust #qwac #letsencrypt #digicert
  18. kravietz 🦇 @[email protected] ·

    #LetsEncrypt has suspended issuing certificates after it identified security issues in one of its roots (!)[^1]

    We temporarily disabled certificate issuance, deployed a configuration change to prevent future issuance from the cross-signed Gen Y hierarchy, and then re-enabled issuance. Certificate revocation and CRL generation remains functional for Gen Y certificates.

    A few days ago #DigiCert was hacked with a Windows (!) screensaver (!)[^2]

    I cannot but remind that both organisations are part of the #WebTrust cartel who had last year unrolled a massive “grassroots” smear campaign against EU #QWAC certificates, presenting them as “security and privacy threat”, whereas from both legal and technical point of view QWAC is much more secure:

    https://krvtz.net/en/posts/the-real-story-behind-eu-qwac.html

    [^1]: https://community.letsencrypt.org/t/2026-05-08-gen-y-cross-certified-subordinate-cas-missing-serverauth-eku/247105

    [^2]: https://cybersecuritynews.com/digicert-hacked-screensaver/

    #digicert #letsencrypt #qwac #webtrust
  19. CyberVeille.ch @[email protected] ·

    📢 DigiCert compromis via ingénierie sociale : émission non autorisée de certificats EV Code Signing
    📝 ## 🔍 Contexte

    Source : Help Net Security, publié le 4 mai 2026.
    📖 cyberveille : cyberveille.ch/posts/2026-05-0
    🌐 source : helpnetsecurity.com/2026/05/04
    #Code_Signing #DigiCert #Cyberveille

    #cyberveille #digicert #code_signing
  20. CyberVeille.ch @[email protected] ·

    📢 Faux positifs Microsoft Defender sur certificats DigiCert liés à une brèche réelle de l'AC
    📝 ## 🗓️ Contexte

    Publié le 3 mai 2026 sur BleepingComputer par La...
    📖 cyberveille : cyberveille.ch/posts/2026-05-0
    🌐 source : bleepingcomputer.com/news/secu
    #APT_Q_27 #DigiCert #Cyberveille

    #cyberveille #digicert #apt_q_27
  21. Winbuzzer @[email protected] ·

    winbuzzer.com/2026/05/06/micro

    Defender Misflags DigiCert Root Certificates, Breaking Windows SSL Trust

    #MicrosoftDefender #Microsoft #DigiCert #Cybersecurity #Malware #AntivirusSoftware #WindowsSecurity #ThreatIntelligence #Windows11 #MicrosoftWindows

    #microsoftdefender #microsoft #digicert #cybersecurity #malware #antivirussoftware
  22. Winbuzzer @[email protected] ·

    winbuzzer.com/2026/05/06/micro

    Defender Misflags DigiCert Root Certificates, Breaking Windows SSL Trust

    #MicrosoftDefender #Microsoft #DigiCert #Cybersecurity #Malware #AntivirusSoftware #WindowsSecurity #ThreatIntelligence #Windows11 #MicrosoftWindows

    #microsoftdefender #microsoft #digicert #cybersecurity #malware #antivirussoftware
  23. Winbuzzer @[email protected] ·

    winbuzzer.com/2026/05/06/micro

    Defender Misflags DigiCert Root Certificates, Breaking Windows SSL Trust

    #MicrosoftDefender #Microsoft #DigiCert #Cybersecurity #Malware #AntivirusSoftware #WindowsSecurity #ThreatIntelligence #Windows11 #MicrosoftWindows

    #microsoftdefender #microsoft #digicert #cybersecurity #malware #antivirussoftware
  24. Winbuzzer @[email protected] ·

    winbuzzer.com/2026/05/06/micro

    Defender Misflags DigiCert Root Certificates, Breaking Windows SSL Trust

    #MicrosoftDefender #Microsoft #DigiCert #Cybersecurity #Malware #AntivirusSoftware #WindowsSecurity #ThreatIntelligence #Windows11 #MicrosoftWindows

    #microsoftwindows #windows11 #threatintelligence #windowssecurity #antivirussoftware #malware
  25. Winbuzzer @[email protected] ·

    winbuzzer.com/2026/05/06/micro

    Defender Misflags DigiCert Root Certificates, Breaking Windows SSL Trust

    #MicrosoftDefender #Microsoft #DigiCert #Cybersecurity #Malware #AntivirusSoftware #WindowsSecurity #ThreatIntelligence #Windows11 #MicrosoftWindows

    #microsoftdefender #microsoft #digicert #cybersecurity #malware #antivirussoftware
  26. Marcel Waldvogel @[email protected] ·

    Genau bei der Zertifizierung von solcher Software hat nun aber die Zertifizierungsstelle #DigiCert sich übertölpeln lassen. Und zwar in der teuersten und damit angeblich sichersten Kategorie «Extended Validation» (EV). So wurden mindestens 27 Code-Signing-Zertifikate im Namen von reputablen Firmen ausgestellt, aber für Cyberkriminelle. Digicert ist dem erst nachgegangen, als über 8 Tage hinweg 7 missbräuchliche Zertifikate durch Dritte gemeldet wurden.
    mastodon.social/@hrbrmstr/1165

    #digicert
  27. Marcel Waldvogel @[email protected] ·

    Genau bei der Zertifizierung von solcher Software hat nun aber die Zertifizierungsstelle #DigiCert sich übertölpeln lassen. Und zwar in der teuersten und damit angeblich sichersten Kategorie «Extended Validation» (EV). So wurden mindestens 27 Code-Signing-Zertifikate im Namen von reputablen Firmen ausgestellt, aber für Cyberkriminelle. Digicert ist dem erst nachgegangen, als über 8 Tage hinweg 7 missbräuchliche Zertifikate durch Dritte gemeldet wurden.
    mastodon.social/@hrbrmstr/1165

    #digicert
  28. Marcel Waldvogel @[email protected] ·

    Genau bei der Zertifizierung von solcher Software hat nun aber die Zertifizierungsstelle #DigiCert sich übertölpeln lassen. Und zwar in der teuersten und damit angeblich sichersten Kategorie «Extended Validation» (EV). So wurden mindestens 27 Code-Signing-Zertifikate im Namen von reputablen Firmen ausgestellt, aber für Cyberkriminelle. Digicert ist dem erst nachgegangen, als über 8 Tage hinweg 7 missbräuchliche Zertifikate durch Dritte gemeldet wurden.
    mastodon.social/@hrbrmstr/1165

    #digicert
  29. Marcel Waldvogel @[email protected] ·

    Genau bei der Zertifizierung von solcher Software hat nun aber die Zertifizierungsstelle #DigiCert sich übertölpeln lassen. Und zwar in der teuersten und damit angeblich sichersten Kategorie «Extended Validation» (EV). So wurden mindestens 27 Code-Signing-Zertifikate im Namen von reputablen Firmen ausgestellt, aber für Cyberkriminelle. Digicert ist dem erst nachgegangen, als über 8 Tage hinweg 7 missbräuchliche Zertifikate durch Dritte gemeldet wurden.
    mastodon.social/@hrbrmstr/1165

    #digicert
  30. Marcel Waldvogel @[email protected] ·

    Genau bei der Zertifizierung von solcher Software hat nun aber die Zertifizierungsstelle #DigiCert sich übertölpeln lassen. Und zwar in der teuersten und damit angeblich sichersten Kategorie «Extended Validation» (EV). So wurden mindestens 27 Code-Signing-Zertifikate im Namen von reputablen Firmen ausgestellt, aber für Cyberkriminelle. Digicert ist dem erst nachgegangen, als über 8 Tage hinweg 7 missbräuchliche Zertifikate durch Dritte gemeldet wurden.
    mastodon.social/@hrbrmstr/1165

    #digicert
  31. The Threat Codex @[email protected] ·

    DigiCert breached via malicious screensaver file
    #DigiCert #MicrosoftDefender #ZhongStealer
    helpnetsecurity.com/2026/05/04

    #digicert #microsoftdefender #zhongstealer
  32. The Threat Codex @[email protected] ·

    DigiCert breached via malicious screensaver file
    #DigiCert #MicrosoftDefender #ZhongStealer
    helpnetsecurity.com/2026/05/04

    #digicert #microsoftdefender #zhongstealer
  33. The Threat Codex @[email protected] ·

    DigiCert breached via malicious screensaver file
    #DigiCert #MicrosoftDefender #ZhongStealer
    helpnetsecurity.com/2026/05/04

    #digicert #microsoftdefender #zhongstealer
  34. The Threat Codex @[email protected] ·

    DigiCert breached via malicious screensaver file
    #DigiCert #MicrosoftDefender #ZhongStealer
    helpnetsecurity.com/2026/05/04

    #zhongstealer #microsoftdefender #digicert
  35. The Threat Codex @[email protected] ·

    DigiCert breached via malicious screensaver file
    #DigiCert #MicrosoftDefender #ZhongStealer
    helpnetsecurity.com/2026/05/04

    #digicert #microsoftdefender #zhongstealer
  36. CyberVeille.ch @[email protected] ·

    📢 DigiCert : émission frauduleuse de certificats EV Code Signing via compromission d'endpoints support
    📝 ## 🔍 Contexte

    Rapport d'incident publié sur Bugzilla Mozilla (bug #2033170) par DigiCert, daté du 2026-04-02 au 2026-04-17.
    📖 cyberveille : cyberveille.ch/posts/2026-05-0
    🌐 source : bugzilla.mozilla.org/show_bug.
    #DigiCert #IOC #Cyberveille

    #cyberveille #ioc #digicert
  37. Patmo 🏳️‍🌈 @[email protected] ·

    RE: social.tchncs.de/@simsus/11651

    Wait, what?

    #DigiCert #Malware

    #digicert #malware
  38. Patmo 🏳️‍🌈 @[email protected] ·

    RE: social.tchncs.de/@simsus/11651

    Wait, what?

    #DigiCert #Malware

    #digicert #malware
  39. Marcel SIneM(S)US @[email protected] ·

    Vorfall bei #DigiCert: #Malware-Autoren klauten Zertifikate | Security heise.de/news/Nach-Malware-Ang

    #digicert #malware
  40. Marcel SIneM(S)US @[email protected] ·

    Vorfall bei #DigiCert: #Malware-Autoren klauten Zertifikate | Security heise.de/news/Nach-Malware-Ang

    #digicert #malware
  41. Marcel SIneM(S)US @[email protected] ·

    Vorfall bei #DigiCert: #Malware-Autoren klauten Zertifikate | Security heise.de/news/Nach-Malware-Ang

    #malware #digicert
  42. Marcel SIneM(S)US @[email protected] ·

    Vorfall bei #DigiCert: #Malware-Autoren klauten Zertifikate | Security heise.de/news/Nach-Malware-Ang

    #digicert #malware
  43. Erik van Straten @[email protected] ·

    @squiblydoo : perhaps this is related to the DigiCert hack described in bugzilla.mozilla.org/show_bug.?

    #DigiCert #CodeSigning #EVcertificates

    #digicert #codesigning #evcertificates
  44. Erik van Straten @[email protected] ·

    @squiblydoo : perhaps this is related to the DigiCert hack described in bugzilla.mozilla.org/show_bug.?

    #DigiCert #CodeSigning #EVcertificates

    #digicert #codesigning #evcertificates
  45. Erik van Straten @[email protected] ·

    @squiblydoo : perhaps this is related to the DigiCert hack described in bugzilla.mozilla.org/show_bug.?

    #DigiCert #CodeSigning #EVcertificates

    #digicert #codesigning #evcertificates
  46. Erik van Straten @[email protected] ·

    @squiblydoo : perhaps this is related to the DigiCert hack described in bugzilla.mozilla.org/show_bug.?

    #DigiCert #CodeSigning #EVcertificates

    #digicert #codesigning #evcertificates
  47. Österreich @[email protected] ·

    europesays.com/at/139707/ Vorfall bei DigiCert: Malware-Autoren klauten Zertifikate #AT #Austria #Digicert #IT #Malware #Österreich #PKI #Science #Science&Technology #Security #Technik #Technology #WebPKI #Wissenschaft #Wissenschaft&Technik

    #wissenschaft #webpki #technology #technik #security #science
  48. Dagger ☀️ @[email protected] ·

    Ich bin mir nicht sicher, ob „Zuerst infizierten Kriminelle Kundendienstmitarbeiter mit Schadsoftware“ der korrekte Ausdruck ist, aber schon wieder #DigiCert?

    heise.de/news/Nach-Malware-Ang

    #digicert
  49. Dagger ☀️ @[email protected] ·

    Ich bin mir nicht sicher, ob „Zuerst infizierten Kriminelle Kundendienstmitarbeiter mit Schadsoftware“ der korrekte Ausdruck ist, aber schon wieder #DigiCert?

    heise.de/news/Nach-Malware-Ang

    #digicert
  50. Dagger ☀️ @[email protected] ·

    Ich bin mir nicht sicher, ob „Zuerst infizierten Kriminelle Kundendienstmitarbeiter mit Schadsoftware“ der korrekte Ausdruck ist, aber schon wieder #DigiCert?

    heise.de/news/Nach-Malware-Ang

    #digicert
  51. Daniel Marsh @[email protected] ·

    Microsoft Defender's recent false positive, flagging legitimate DigiCert root certificates as 'Trojan:Win32/Cerdigent.A!dha', sent IT teams globally into a frenzy on May 3. This widespread incident consumed valuable operational time, undermined faith in automated defenses, and highlights the urgent need for more stringent testing of security intelligence updates for foundational system…

    tpp.blog/1f9adaw

    #cybersecurity #microsoftdefender #digicert

    🤖 This post was AI-generated.

    #cybersecurity #microsoftdefender #digicert
  52. The Threat Codex @[email protected] ·

    Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha
    #MicrosoftDefender #DigiCert #GoldenEyeDog #ZhongStealer
    bleepingcomputer.com/news/secu

    #microsoftdefender #digicert #goldeneyedog #zhongstealer
  53. The Threat Codex @[email protected] ·

    Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha
    #MicrosoftDefender #DigiCert #GoldenEyeDog #ZhongStealer
    bleepingcomputer.com/news/secu

    #microsoftdefender #digicert #goldeneyedog #zhongstealer
  54. The Threat Codex @[email protected] ·

    Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha
    #MicrosoftDefender #DigiCert #GoldenEyeDog #ZhongStealer
    bleepingcomputer.com/news/secu

    #microsoftdefender #digicert #goldeneyedog #zhongstealer
  55. The Threat Codex @[email protected] ·

    Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha
    #MicrosoftDefender #DigiCert #GoldenEyeDog #ZhongStealer
    bleepingcomputer.com/news/secu

    #zhongstealer #goldeneyedog #digicert #microsoftdefender
  56. The Threat Codex @[email protected] ·

    Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha
    #MicrosoftDefender #DigiCert #GoldenEyeDog #ZhongStealer
    bleepingcomputer.com/news/secu

    #microsoftdefender #digicert #goldeneyedog #zhongstealer
  57. kravietz 🦇 @[email protected] ·

    #DigiCert customer support compromised with .scr ZIP attachment 🤷

    During our investigation between 2026-04-14 and 2026-04-17, as DigiCert identified certificates potentially affected by the threat actor’s actions, we revoked them. DigiCert revoked 60 certificates issued from the following CAs:

    • DigiCert Trusted G4 Code Signing RSA4096 SHA256 2021 CA1
    • DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    • GoGetSSL G4 CS RSA4096 SHA256 2022 CA-1
    • Verokey High Assurance Secure Code EV

    https://bugzilla.mozilla.org/show_bug.cgi?id=2033170

    #x509 #infosec

    #digicert #infosec #x509
  58. kravietz 🦇 @[email protected] ·

    #DigiCert customer support compromised with .scr ZIP attachment 🤷

    During our investigation between 2026-04-14 and 2026-04-17, as DigiCert identified certificates potentially affected by the threat actor’s actions, we revoked them. DigiCert revoked 60 certificates issued from the following CAs:

    • DigiCert Trusted G4 Code Signing RSA4096 SHA256 2021 CA1
    • DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    • GoGetSSL G4 CS RSA4096 SHA256 2022 CA-1
    • Verokey High Assurance Secure Code EV

    https://bugzilla.mozilla.org/show_bug.cgi?id=2033170

    #x509 #infosec

    #digicert #infosec #x509
  59. kravietz 🦇 @[email protected] ·

    #DigiCert customer support compromised with .scr ZIP attachment 🤷

    During our investigation between 2026-04-14 and 2026-04-17, as DigiCert identified certificates potentially affected by the threat actor’s actions, we revoked them. DigiCert revoked 60 certificates issued from the following CAs:

    • DigiCert Trusted G4 Code Signing RSA4096 SHA256 2021 CA1
    • DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    • GoGetSSL G4 CS RSA4096 SHA256 2022 CA-1
    • Verokey High Assurance Secure Code EV

    https://bugzilla.mozilla.org/show_bug.cgi?id=2033170

    #x509 #infosec

    #digicert #infosec #x509
  60. kravietz 🦇 @[email protected] ·

    #DigiCert customer support compromised with .scr ZIP attachment 🤷

    During our investigation between 2026-04-14 and 2026-04-17, as DigiCert identified certificates potentially affected by the threat actor’s actions, we revoked them. DigiCert revoked 60 certificates issued from the following CAs:

    • DigiCert Trusted G4 Code Signing RSA4096 SHA256 2021 CA1
    • DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    • GoGetSSL G4 CS RSA4096 SHA256 2022 CA-1
    • Verokey High Assurance Secure Code EV

    https://bugzilla.mozilla.org/show_bug.cgi?id=2033170

    #x509 #infosec

    #x509 #infosec #digicert