Cybersecurity

Sponsored
by

Cybersecurity / Most Commented

PHP Releases Emergency Security Patches as Researchers Report Exploit Attempts

PHP has released emergency patches for two critical vulnerabilities that could enable unauthenticated remote code execution. Security researchers report attempted exploitation, while authorities urge immediate updates across internet-facing hosting environments. more

Canadian Cybersecurity Executive Arrested Amid FBI Investigation Into ShinyHunters

A Canadian ransomware negotiator faces US federal extortion charges amid an FBI investigation into ShinyHunters, following a breach that exposed sensitive employee records through an unpatched third-party system. more

Why OCSP Now? A Fresh Take on Certificate Status Checking

Previous Verisign Informed™ posts emphasized the importance of high-assurance infrastructure and timely certificate status information, including revocation status, which can change after issuance or expiration and is essential for establishing trust in Internet security. more

Africa’s Digital Health Growth Exposes the Need for Stronger Cybersecurity Governance

As African healthcare systems adopt digital technologies, cybersecurity governance becomes essential to patient safety. Evidence from Ghana highlights gaps in institutional accountability, staff awareness and implementation, underscoring the need for stronger oversight and resilience. more

US Seizes Seven Domains Linked to Alleged Chinese Cyber Espionage Operation

US authorities seized seven domains supporting alleged Chinese cyber espionage tools used against critical infrastructure and other networks across three continents, disrupting scanning and phishing services while leaving questions about their recovery. more

UK and Germany Agree to Coordinate Cyber Defense Against Infrastructure Sabotage

The UK and Germany have announced a partnership to counter cyberattacks and infrastructure sabotage through intelligence sharing and coordinated responses, but have yet to specify participating agencies, covered sectors or operational mechanisms. more

DNS Hijacks Across Three ccTLDs Linked to 32 Unauthorized HTTPS Certificates

An examination of certificate transparency logs identified 32 unauthorized HTTPS certificates following DNS hijacks affecting Ghana, Sierra Leone and American Samoa, exposing vulnerabilities in domain validation and the infrastructure supporting trusted web connections. more

Who Checks the Models? The Case for UN Oversight of Frontier AI

As AI agents demonstrate increasingly autonomous behavior, Gabriel Accascina proposes a UN-led evaluation system modeled on WHO prequalification, using independent testing and government procurement incentives to strengthen international oversight of frontier AI. more

From Verification to Trust: Refreshing the Security Status Quo

Digital signatures, introduced by Whitfield Diffie and Martin E. Hellman in 1976's "New Directions in Cryptography," have provided the cornerstone of the internet's cybersecurity apparatus for decades. Every moment of every day, behind the scenes of nearly every secure online interaction, these signatures enable critical trust decisions made across the globe. more

ICANN Study Links 56% of Malicious Domains to Related Registrations

ICANN researchers identified associated domains for 56.4% of malicious registrations studied, introducing a public-data detection method that could inform DNS abuse investigations and proposed registrar obligations. more

Verisign Informed™ Is a New High-Assurance Solution for Validating Trust

Earlier today, Verisign announced the launch of Verisign Informed, a new solution -- backed by Verisign's high-assurance infrastructure -- that combats the threat of "stale trust" in digital certificates by enabling critical trust decisions to be made using the most current status information available. more

OpenAI Agent Bypasses Internet Restrictions Through DNS

OpenAI paused tool-enabled work on its most capable models after a research agent bypassed sandbox Internet restrictions by using DNS to communicate with an external chatbot during reinforcement-learning training. more

Africa Is Adopting AI but Who Is Governing the Risks?

African institutions are adopting AI across public services and business, but effective deployment requires governance structures that address cybersecurity, accountability, procurement, digital sovereignty, regulatory coordination and institutional capacity. more

Why Africa Keeps Relearning the Same Digital Lessons

Africa's digital transformation challenge is not a lack of strategies or research, but weak institutional learning that prevents governments from preserving project lessons, applying evidence and avoiding repeated failures across administrations and technology programs. more

EU Cyber Resilience Act Costs and Economic Impact

The EU Cyber Resilience Act faces questions over its economic impact as third-party estimates point to substantial compliance costs, competitive pressures and unresolved concerns about whether its requirements meet established proportionality and competition norms. more