Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
8 stories
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
Yes, I admit, this is 100% vibecoded, but it scratches an itch i've had for a while. Seems to work for my usecases at this time, but might add some more features in the future. Comments
Amazon Bedrock AgentCore Gateway now supports TLS certificates signed by private certificate authorities (CAs) on MCP, OpenAPI, and HTTP proxy targets. This feature enables you to connect securely to gateway targets that use TLS certificates issued by your own private certificate authority.
The move will be part of a major overhaul of the ecosystem for website authentication.
Starting today, Amazon RDS for PostgreSQL introduces support for post-quantum TLS (PQ-TLS) key exchange, providing you with post-quantum cryptography options for encrypting your data in-transit. RDS for PostgreSQL versions 18 and higher support modification of the ssl_groups parameter.
How to fix CVE-2026-89422: upgrade Erlang/OTP to 29.1.1, 28.5.0.7, or 27.3.4.18
We've switched all Lightpanda browser HTTP requests from our home made Zig HTTP client + zig.tls) to libcurl
Browser fingerprinting tracks you without cookies by reading dozens of device signals. See your own fingerprint live and what actually defends against it.
Showing 8 of 8 stories
You're all caught up.
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news
Join 15,000+ AI enthusiasts