Skip to content

Search results for «Certificate Authority»

  1. GoDaddy Certificate Revocation Incident: What Affected Customers Need to Know

    Over 400,000 GoDaddy and Starfield SSL certificates were revoked after a documentation mismatch. Affected customers must install replacements to restore secure site access.

    3 min read

  2. Domain Registrar Security Risks: ccTLD Registry Hijacks Enable Unauthorized Certificates

    Registry-level compromises in three ccTLDs led to unauthorized TLS certificates for major domains. The incidents reveal gaps in domain registrar security controls and DNS validation processes.

    3 min read

  3. DodoPayments review: Security After Metabase SQL Injection Incident

    Dodo Payments disclosed unauthorized access to its self-hosted Metabase analytics system in August 2026. The incident involved CVE-2026-72898 but left payment processing unaffected.

    3 min read

  4. eMudhra Review: Weak Private Keys Force Remediation Steps

    The October 2026 discovery of weak private keys in eight eMudhra intermediate CAs led to immediate revocations and the company's exit from global TLS issuance.

    3 min read

  5. eMudhra Review: Key Weakness Forces Exit from Global TLS Business

    Eight eMudhra intermediate CA keys generated with insufficient randomness led to immediate browser blocks and the company's withdrawal from global TLS issuance in October 2026.

    3 min read

  6. ConnectWise Cloud Backup review: Supply-chain attack compromises Microsoft 365 tenants

    A compromised credential in ConnectWise Cloud Backup allowed unauthorized Microsoft Graph access across customer tenants in mid-October 2026.

    3 min read

  7. Gopax Security Review: Analyzing the 2026 Account Access Incident

    Gopax detected unauthorized access to nine accounts in October 2026 after a one-month delay, with no asset losses reported.

    3 min read

  8. ConnectWise Security Review: Supply-Chain Incident Impact on Microsoft 365 Tenants

    The October 2026 compromise of ConnectWise Cloud Backup credentials allowed unauthorized access to 162–173 Microsoft 365 tenants. This review details the timeline, permissions abused, and recommended actions.

    3 min read

  9. Gopax Security Review: Data Breach Details and Trustworthiness Assessment

    Gopax experienced a limited data exposure in October 2026 affecting nine accounts. The exchange remains a licensed South Korean VASP with ISMS and ISO certifications but lacks full personal data protection certification.

    3 min read

  10. Brevo Security Review: Lessons from SSO and Supply-Chain Incidents

    Two September 2026 incidents exposed authorization gaps in Brevo’s SSO and a hardcoded Cloudflare credential. The platform restored service quickly, yet the events underscore script and credential risks for email marketing users.

    3 min read