In the News

Open source code is vital to software development at most organizations, but that doesn't mean that enterprises have figured out how to use open source without inadvertently introducing vulnerabilities into their code.

Chief Executive spoke with Sectigo CEO Bill Holtz about C-Suite concerns on cybersecurity, how the company manages to recruit tech talent and more. These are excerpts from the interview.

As connected devices become common throughout a wide range of industries, it should come as no surprise that we are reading about the increasing frequency of attacks targeting IoT devices and systems. Particularly alarming are the facts that many of these attacks are now targeting devices linked to safety rather than to fraud.

Digital certificate industry experts have recently discovered a flaw in the certificate generation practices of several major CAs, which has resulted in millions of estimated active TLS/SSL certificates that are non-compliant with mandatory industry standards. These standards are engineered to protect cryptographic security as well as trustworthy identity information in public certificates.

Despite enterprises’ increasing use of modern, agile computing environments including virtualization, containerization, IoT, and cloud, a vast number of IT administrators continue to deploy and manage certificates using old-fashioned techniques better suited to the infrastructure of the 90s than today’s DevOps environments.

Tim Callan, senior fellow at Sectigo, told SC Media UK that automation of certificate lifecycle management – including renewal – is key. "A good automated platform can track certificates, notify IT professionals when they’re due to expire, and even automatically replace them with new certificates," he said.

Sectigo has formed a strategic alliance with Kyrio, a subsidiary of CableLabs, which is engaged with more than 30 global standards groups spanning the energy, industrial and commercial IoT, and Smart Cities.