-
Podcast Apr 26, 2024
Root Causes 381: Apple Chip Sideloading Attack Leaks Encryption Keys
A newly revealed side channel attack enables theft of private keys from M-series Apple chips. We explain.
-
Podcast Apr 23, 2024
Root Causes 380: If Quantum Supremacy Comes Earlier Than Expected
We talk about the challenges to PQC migration and what happens if quantum computers break RSA before we're expecting them to.
-
Podcast Apr 18, 2024
Root Causes 379: AI-generated Fake IDS for KYC
Inexpensive and easily obtained deepfake photographs of IDs, generated by AI, are available online. These pose a problem for KYC initiatives.
-
Podcast Apr 15, 2024
Root Causes 378: Why Are Forced Revocations So Difficult?
We delve deep into the problem of failure to revoke on time and the multiple causes that lead to this ongoing failure.
-
Podcast Apr 11, 2024
Root Causes 377: Is CPS/Issuance Misalignment a Revocation Event?
If you issue public certificates that are fully compliant except they don't reflect what your CPS says, are they misissued? Do they require revocation?
-
Podcast Apr 08, 2024
Root Causes 376: Gartner's New CLM Framework
Gartner has released a new framework for Certificate Lifecycle Management, called the Seven Core Functions of Certificate Automation.
-
Podcast Apr 05, 2024
Root Causes 375: What Is Name Space Lifecycle Management?
CNAMEs, SPF, DMARC, name server entries, and other DNS identifiers, left unattended, can expose companies to identity-based attacks.
-
Podcast Apr 01, 2024
Root Causes 374: NIST Cyber Security Framework 2 Released
NIST Cyber Security Framework version 2.0 is released. It includes guidance on identity management and authentication.
-
Podcast Mar 29, 2024
Root Causes 373: Massive Brand Hijack Subverts Over 21,000 Domains
A massive name space attack has hijacked more than 21,000 domains and subdomains, including a who's who list of major global brands.
-
Podcast Mar 26, 2024
Root Causes 372: Bugzilla Bloodbath
It's a bloodbath on Bugzilla. Since March 9, more than 25 new Bugzilla bugs been written up, which is 10x the typical pace. And it's not over.
-
Podcast Mar 22, 2024
Root Causes 371: MPIC Rules Go to CABF Ballot
A ballot for Multi-perspective Issuance Corroboration (MPIC), formerly known as MPDV, has entered a discussion period in the CA/Browser Forum (CABF).
-
Podcast Mar 19, 2024
Root Causes 370: Drama on Bugzilla
An evolving incident on Bugzilla has garnered a lot of attention and touches several important issues in the WebPKI ecosystem.