DigiCert Monthly Threat Briefing - July 2018

Stay updated on the month’s news and insights regarding the trends and threats in digital certificates (including TLS, SSL and code signing), plus PKI, IoT, encryption, identity and trust.

In this month’s briefing, we’ll cover:
- digital certificates, including TLS/SSL, code signing and PKI,
- trust trends in ACME, blockchain, quantum cryptography, the IoT and more
- financial impacts of (and to) your security investment.

We'll also reward you with some fun and positivity.

Benefit from elevated awareness of current trends, real-world context for your security choices, and refreshed credibility & expertise in website security.

#cybersecurity #security #TLS #SSL #phishing #enterprise #breach #cyberattack #vulnerability

Stay updated on the month’s news and insights regarding the trends and threats in digital certificates (including TLS, SSL and code signing), plus PKI, IoT, encryption, identity and trust.

In this month’s briefing, we’ll cover:
- Possible PII leaks on financial industry websites
- Impacts (and prevention) of end-entity & intermediate certificate expirations
- Megabreach & cybercrime costs, impacts to market cap & stock price, and how businesses can budget for future cybersecurity
- US government funding of Quantum research & deregulation of robocall blocking
- Google Titan Bluetooth 2FA vulnerability and replacement
- Gmail support for MTA-STS
- Faking URL address bars as a phishing vector in mobile devices
- ARIN’s defeat of fraudulently-obtained IP addressing
- University research advancements benefiting CPU microprocessors and consumer/home IoT usage
- digital certificates, including TLS/SSL, code signing and PKI,
- trust trends in ACME, blockchain, quantum cryptography, the IoT and more
- financial impacts of (and to) your security investment.

Benefit from elevated awareness of current trends, real-world context for your security choices, and refreshed credibility & expertise in website security.

#cybersecurity #security #TLS

This webinar updates and prepares you for the latest trends in TLS and SSL. We’ll build your awareness of current industry & market motion, suggest ideas on how to prepare, and provide insight into the future of the online security and digital certificate space. Where applicable, we’ll cover specific geographies and verticals, plus pending/trending ballots and discussion within the CA/Browser Forum.

Join DigiCert's Solutions Engineering expert Dave Corbett to uncover the 4 key phases of best-in-class SSL certificate management. During this 30-minute webinar, you will learn how to:

- Identify your entire SSL landscape with a baseline inventory
- Remediate and remove any weak keys, cipher suites and hashes
- Protect your assets and prevent outages with process automation
- Monitor your certificate suite with reliable tools and resources

Don’t miss this opportunity to learn how to implement a robust SSL certificate management strategy, and to directly ask your questions to our subject matter expert.

Join DigiCert's Solutions Engineering expert Dave Corbett to uncover the 4 key phases of best-in-class SSL certificate management. During this 30-minute webinar, you will learn how to:

- Identify your entire SSL landscape with a baseline inventory
- Remediate and remove any weak keys, cipher suites and hashes
- Protect your assets and prevent outages with process automation
- Monitor your certificate suite with reliable tools and resources

Don’t miss this opportunity to learn how to implement a robust SSL certificate management strategy, and to directly ask your questions to our subject matter expert.

Join DigiCert's Solutions Engineering expert Dave Corbett to uncover the 4 key phases of best-in-class SSL certificate management. During this 30-minute webinar, you will learn how to:

- Identify your entire SSL landscape with a baseline inventory
- Remediate and remove any weak keys, cipher suites and hashes
- Protect your assets and prevent outages with process automation
- Monitor your certificate suite with reliable tools and resources

Don’t miss this opportunity to learn how to implement a robust SSL certificate management strategy, and to directly ask your questions to our subject matter expert.

Stay updated on April 2019’s news regarding the trends and threats in digital certificates including TLS, SSL and code signing, plus PKI, IoT, encryption, identity and trust.

Stay updated on the month’s news and insights regarding the trends and threats in digital certificates (including TLS, SSL and code signing), plus PKI, IoT, encryption, identity and trust.

In this month’s briefing, we’ll cover:
EV Extended Validation and OV Organization Validated certificates, Tumblr, HTTPS, eCommerce, code-signed malware-infected software updates, ACME and the IETF, US Senate bills Corporate Executive Accountability Act and Cyber Resiliency Act, the Weather Channel's ransomware attack, GDPR compliance, blockchain, cryptocurrency, Ethereum, weak passwords, weak private keys, AES, PQC post quantum cryptography, QKD quantum key distribution, IE Internet Explorer, zero day vulnerability with MHT files, Apache and nginx web servers, a suspicious uninvited Chinese guest at Mar-a-Lago, hacked Wi-Fi, Starz vs TorrentFreak, APT34 and OilRig, the Read My Lips and Lab Dookhtegan channel on Telegram, CryptoPokemon ransomware decrypter, charities, and free internet security training for citizens in Aurora, Illinois.

Benefit from elevated awareness of current trends, real-world context for your security choices, and refreshed credibility & expertise in website security.

#cybersecurity #security #TLS

In an effort to keep the healthcare industry ahead of cybersecurity vulnerabilities found in medical devices, The Food and Drug Administration (FDA) has updated a draft guidance document to help manufacturers incorporate cybersecurity best practices to address threats before devices go to market. In the first webinar, Mike and Seth discussed the background of the pre-market guidance document and dove into some of the anticipated changes that will be made in updated guidance. They also addressed general principles of the guidance document including risk assessments, threat modeling, Cybersecurity Bill of Materials (CBOM), and medical device tiering.

In this follow up session, Mike and Seth will continue to dissect the guidance language starting with the recommendations the document makes for designing trustworthy devices. They will review the security best practices the guidance language highlights and will match those best practices to the recommendations made in the document. They will also discuss labeling and documentation recommendations. Similar to the first part of this series, Mike and Seth will respond to questions from the audience throughout the discussion.

Stay updated on the month’s news and insights regarding the trends and threats in digital certificates (including TLS, SSL and code signing), plus PKI, IoT, encryption, identity and trust.

In this month’s briefing, we’ll cover:
Firefox and the DarkMatter CA roots, PrimeKey EJBCA's 63-bit serial numbers, eTLS, TLS 1.3 and Fizz, Microsoft EOS for SHA-1, SSL-protected phishing sites, million-dollar career options in hacking, the spoofed Quanta site, Quantum Computing and Post-Quantum Cryptography PQC, 5G mobile networks, the WordPress Abandoned Cart for WooCommerce plugin, profitability of GDPR compliance, the Chinese BreedReady database, Russia's Sovereign Internet law for the Runet, DOD DISA human movement identification, FBI impact on decreases in DDoS attacks, Israel CERT hotline, and tips from Microsoft's Security Intelligence Report.

We'll also reward you with some fun and positivity.

Benefit from elevated awareness of current trends, real-world context for your security choices, and refreshed credibility & expertise in website security.

#cybersecurity #security #TLS

In an effort to keep the industry ahead of cybersecurity vulnerabilities found in medical devices, The Food and Drug Administration (FDA) has updated a draft guidance document to help manufacturers incorporate cybersecurity best practices to address threats before devices go to market. In this educational webinar, Mike and Seth will discuss the updates made in this guidance and the reasons behind those changes. They will review some of the prescriptive best practices the guidance document endorses and discuss the impacts the FDA hopes this updated guidance will accomplish. Mike and Seth will also discuss the important and evolving role and responsibility of the FDA for the security of medical devices.

Stay updated on the month’s news and insights regarding the trends and threats in digital certificates (including TLS, SSL and code signing), plus PKI, IoT, encryption, identity and trust.

In this month’s briefing, we’ll cover:
- digital certificates, including TLS/SSL, code signing and PKI,
- trust trends in ACME, blockchain, quantum cryptography, the IoT and more
- financial impacts of (and to) your security investment.

We'll also reward you with some fun and positivity.

Benefit from elevated awareness of current trends, real-world context for your security choices, and refreshed credibility & expertise in website security.

#cybersecurity #security #TLS

This webinar will update and prepare you for the latest trends in TLS and SSL. We’ll build your awareness of current industry & market motion, suggest ideas on how to prepare, and provide insight into the future of the online security and digital certificate space. Where applicable, we’ll cover specific geographies and verticals, plus pending/trending ballots and discussion within the CA/Browser Forum.

Stay updated on the month’s news and insights regarding the trends and threats in digital certificates (including TLS, SSL and code signing), plus PKI, IoT, encryption, identity and trust.

In this month’s briefing, we’ll cover:
- digital certificates, including TLS/SSL, code signing and PKI,
- trust trends in ACME, blockchain, quantum cryptography, the IoT and more
- financial impacts of (and to) your security investment.

We'll also reward you with some fun and positivity.

Benefit from elevated awareness of current trends, real-world context for your security choices, and refreshed credibility & expertise in website security.

#cybersecurity #security #TLS