SSL/TLS

This section has all the newest information on SSL/TLS (Secure Sockets Layer/Transport Layer Security), such as new weaknesses, changes to the protocols, and the safest ways to communicate. Stay up to date on changes, security alerts, and new developments in SSL/TLS technology. Our coverage shows how these protocols are changing to keep data safe and make sure that online exchanges are safe.

Attackers Hijack .gh, .sl, and .as Domains to Obtain Unauthorized SSL Certificates

Attackers compromised the infrastructure of third-party country-code top-level domains (ccTLDs) for Ghana (.gh), Sierra Leone (.sl), and American Samoa (.as).…

4 weeks ago

10 Best Free SSL Checker Tools 2026

SSL Checker helps you troubleshoot common SSL issues and SSL endpoint vulnerabilities. With the Free SSL Checker Tools, you need…

10 months ago

TLS Certificate Mis-Issuance Exposes 1.1.1.1 DNS Service to Exploitation

Security researchers revealed that three unauthorized TLS certificates were issued in May 2025 for 1.1.1.1, the widely used public DNS…

1 year ago

New “Opossum” Attack Breaches Secure TLS by Injecting Malicious Messages

A newly discovered man-in-the-middle exploit dubbed “Opossum” has demonstrated the unsettling ability to compromise secure communications over Transport Layer Security…

1 year ago

Let’s Encrypt Expands to Issue SSL/TLS Certificates for IP Addresses

Let’s Encrypt, a leading certificate authority (CA) known for providing free SSL/TLS certificates since 2015, has issued its first-ever certificate…

1 year ago

Let’s Encrypt Launches 6-Day Certificates for IP-Based SSL Encryption

Let’s Encrypt, the world-renowned free Certificate Authority (CA), is on the verge of a significant milestone: issuing SSL/TLS certificates for…

1 year ago

Cobalt Strike 4.11.1 Released With SSL Checkbox Fix

Cobalt Strike has announced the release of version 4.11.1, an out-of-band update addressing several critical issues discovered in the previous…

1 year ago

Fake Certificate Issued for Alibaba Cloud After SSL.com Validation Trick

A critical vulnerability in SSL.com’s domain validation process allowed unauthorized parties to fraudulently obtain TLS certificates for high-profile domains, including…

2 years ago

Google to Reduce SSL Certificate Lifespan to 90 Days

Recently, Google declared its plan to reduce the maximum validity for public TLS (SSL) certificates from 398 to 90 days.…

4 years ago

FortiOS SSL-VPN Bug Let Attackers Execute Arbitrary Code Remotely

A critical vulnerability in FortiOS SSL-VPN let attackers perform unauthenticated arbitrary code execution remotely, and this flaw has been tracked…

4 years ago