Cloud Security
AWS details PKI best practices for IAM Roles Anywhere integration
Amazon Web Services publishes guidance on configuring public key infrastructure for secure temporary credential issuance to external workloads.
X.509
Everything Threat Times has reported about X.509: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Google BoringSSL fixes two name constraint bypass flaws in SAN validation logic
CERT/CC details five findings in BoringSSL certificate validation; two are patched, while three remain under review or were rejected by the vendor team.