Cybersecurity

DNSSEC in Ghana: 99% Can Validate, But .gh Remains Unsigned

Ghana reports approximately 99% DNSSEC validation capability among measured users, yet its .gh domain remains unsigned, exposing a gap between resolver readiness and domain security that calls for coordinated deployment and operational planning.

Vulnerability Windows and Exposure Costs: Modeling the Effects of Stale Trust

A Verisign Labs framework quantifies how compromised certificates remain trusted when revocation information is stale, using vulnerability windows and exposure costs to compare security risks and measure the benefits of faster certificate status updates.

Too Many Providers, More Moving Parts: The Challenge of SSL Certificate Fragmentation

Research into SSL certificates at Forbes Global 2000 companies reveals widespread provider fragmentation, raising operational concerns as certificate validity periods shorten to 100 days in March 2027.

CaribNOG SHIELD Aims to Build Caribbean Cybersecurity Capacity Through Local Training

CaribNOG's new SHIELD initiative aims to strengthen Caribbean Internet security through technical internships, routing security training and regional collaboration, with St Kitts and Nevis planning to introduce the programme in 2027.

Abolish The Public Suffix List

The Public Suffix List has become a critical dependency for web security despite inconsistent implementation, restrictive admission policies and limited maintenance resources. Its replacement would require coordinated standards development and greater domain operator control.

Unfolding Forensics of a Lawfare Train Wreck: The EU CRA

The EU Cyber Resilience Act faces mounting implementation challenges involving cybersecurity standards, vulnerability reporting, regulatory overlap and fundamental rights. The author argues that its expansive obligations risk undermining the regulation's effectiveness and enforceability.

Why OCSP Now? A Fresh Take on Certificate Status Checking

Previous Verisign Informed™ posts emphasized the importance of high-assurance infrastructure and timely certificate status information, including revocation status, which can change after issuance or expiration and is essential for establishing trust in Internet security.

Africa’s Digital Health Growth Exposes the Need for Stronger Cybersecurity Governance

As African healthcare systems adopt digital technologies, cybersecurity governance becomes essential to patient safety. Evidence from Ghana highlights gaps in institutional accountability, staff awareness and implementation, underscoring the need for stronger oversight and resilience.

Who Checks the Models? The Case for UN Oversight of Frontier AI

As AI agents demonstrate increasingly autonomous behavior, Gabriel Accascina proposes a UN-led evaluation system modeled on WHO prequalification, using independent testing and government procurement incentives to strengthen international oversight of frontier AI.

From Verification to Trust: Refreshing the Security Status Quo

Digital signatures, introduced by Whitfield Diffie and Martin E. Hellman in 1976's "New Directions in Cryptography," have provided the cornerstone of the internet's cybersecurity apparatus for decades. Every moment of every day, behind the scenes of nearly every secure online interaction, these signatures enable critical trust decisions made across the globe.

Verisign Informed™ Is a New High-Assurance Solution for Validating Trust

Earlier today, Verisign announced the launch of Verisign Informed, a new solution -- backed by Verisign's high-assurance infrastructure -- that combats the threat of "stale trust" in digital certificates by enabling critical trust decisions to be made using the most current status information available.

Africa Is Adopting AI but Who Is Governing the Risks?

African institutions are adopting AI across public services and business, but effective deployment requires governance structures that address cybersecurity, accountability, procurement, digital sovereignty, regulatory coordination and institutional capacity.

Why Africa Keeps Relearning the Same Digital Lessons

Africa's digital transformation challenge is not a lack of strategies or research, but weak institutional learning that prevents governments from preserving project lessons, applying evidence and avoiding repeated failures across administrations and technology programs.

EU Cyber Resilience Act Costs and Economic Impact

The EU Cyber Resilience Act faces questions over its economic impact as third-party estimates point to substantial compliance costs, competitive pressures and unresolved concerns about whether its requirements meet established proportionality and competition norms.

Taming Shadow AI: Closing the Context Gap in Enterprise AI Security

Shadow AI exposes sensitive enterprise data when employees use unsanctioned AI tools. Context-aware guardrails can reduce leakage and false positives by combining deterministic rules, contextual inspection, graduated enforcement and centralized observability.