Vulnerabilities
NetEase Cloud Music Windows Client Has Critical TLS Validation Flaw
A critical vulnerability in NetEase Cloud Music for Windows allows attackers to intercept traffic and steal session credentials through man-in-the-middle attacks.
TLS
Everything Threat Times has reported about TLS: 7 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Privasys ra-tls-clients Fixes Critical TLS Attestation Bypass in Version 0.11.0
A critical flaw in Privasys remote attestation clients allowed attackers to impersonate TLS endpoints by forging evidence, a issue resolved in the latest release.
Tech News
Let’s Encrypt Sets 64-Day Certificate Validity Default for February 2027
The certificate authority will shorten default lifetimes to prepare for a 45-day standard in 2028, urging users to test automation now.
Tech News
Let’s Encrypt to shorten TLS certificate lifetimes to 64 days in 2027
The nonprofit certificate authority will reduce default validity periods, requiring more frequent renewals for web administrators starting next year.
Vulnerabilities
Privasys ra-tls-clients 0.5.0 Fixes Critical Remote Attestation Relay Flaw
A critical vulnerability in Privasys remote attestation TLS clients allowed attackers to relay quotes, bypassing security checks in versions prior to 0.5.0.
Vulnerabilities
Critical TLS Flaw in Privasys rustls Allows Quote Relay Attacks
A critical vulnerability in the Privasys rustls library allows attackers to relay enclave quotes, compromising attestation integrity until version 0.8.1.
Cyber Attacks
Microsoft urges immediate testing of post-quantum certificate ecosystems
Microsoft Security advises organizations to begin testing post-quantum authentication now via its new TLS Pilot Program to prepare for future cryptographic shifts.