In the News

Private CA (Private certification authority) is an enterprise-specific certification authority that functions like a publicly-trusted CA. Essentially, an enterprise creates its own private base certificate which can issue other private certificates for internal servers and users. Private CA is also known as Private PKI or internal Certificate Authority.

For the second time in three years, Microsoft-owned professional networking site LinkedIn has failed to update a transport layer security(TLS) certificate, putting users at risk of phishing attacks.

Today, there are 7 billion connected devices globally. By 2025, this number is expected to reach 50 billion. A major buyer, among other Critical National Infrastructure installations, is the energy sector, which is seeing interactive appliances and apps and remote control capabilities integrated in industrial operations. (p. 20)

Sectigo has purchased Internet of Things security provider Icon Labs to expand its private trust business beyond issuing certificates and get into verifying firmware and hardening devices.

Certificate authority (CA) Sectigo, the artist formerly known as Comodo CA, has bought out security biz Icon Labs. Icon Labs will be absorbed into Sectigo's IoT Security Platform product, we are told, "with the industry-first ability to use purpose-built IoT issuance from a trusted third-party CA".

Will connected devices be insecure forever? Or will legislation – such as the recent UK mandate announced this week – help boost IoT security? Threatpost sits down with Jason Soroko, chief technology officer of IoT at Sectigo, to discuss IoT security. This is a lightly-edited transcription of The Threatpost Podcast: What is the Future of IoT Security?

Open source code is vital to software development at most organizations, but that doesn't mean that enterprises have figured out how to use open source without inadvertently introducing vulnerabilities into their code.