-
Listen Now
EPISODE 216
Broadcast Date:
April 11, 202211 minutes
Podcast Apr 11, 2022Root Causes 216: What Is crt.sh?
A foundational tool for monitoring public SSL certificates is crt.sh. We explain what crt.sh does and why it is so popular with SSL industry watchers.
-
Listen Now
EPISODE 215
Broadcast Date:
April 8, 202224 minutes
Podcast Apr 08, 2022Root Causes 215: Passwordless Authentication and Legacy Systems
Those using passwordless authentication frequently employ legacy systems that cannot support this scheme. We detail steps to mitigate this problem.
-
Listen Now
EPISODE 214
Broadcast Date:
April 5, 202211 minutes
Podcast Apr 05, 2022Root Causes 214: New DUO MFA Flaw Explained
A recent FBI warning cautions organizations about exploits based on misconfigured DUO MFA. We explain this exploit and why it is noteworthy.
-
Listen Now
EPISODE 213
Broadcast Date:
March 31, 20228 minutes
Podcast Mar 31, 2022Root Causes 213: 600-domain Phishing Attack
A recent phishing campaign encompassed 600 unique domains. We discuss the implications of a campaign of this scale and high level of organization.
-
Learn More
Why Privileged Access Management (PAM)? Importance, Risks & More
Blog Post from Sectigo
Blog Post Mar 29, 2022Privileged Access Management can help enhance network security - but it does come with risks. Learn about these PAM risks & best practices to avoid them.
-
Listen Now
EPISODE 212
Broadcast Date:
March 28, 202211 minutes
Podcast Mar 28, 2022Root Causes 212: S/MIME Limited to Three Years
On April 1 new root program requirements from Apple for S/MIME certificates go into effect, including a limitation of the allowable term to three years.
-
Listen Now
EPISODE 211
Broadcast Date:
March 14, 202214 minutes
Podcast Mar 14, 2022Root Causes 211: Does CLM Make Wildcard and MDC Irrelevant?
We weigh the degree to which Certificate Lifecycle Management (CLM) renders the benefits of wildcard and multi-domain certificates obsolete.
-
Listen Now
EPISODE 210
Broadcast Date:
March 8, 20227 minutes
Podcast Mar 08, 2022Root Causes 210: Living off the Land
Microsoft has deprecated support for the popular sysadmin tool WMIC. Join our hosts as they explain why and the broader lessons we can learn.
-
Listen Now
EPISODE 209
Broadcast Date:
March 1, 202221 minutes
Podcast Mar 01, 2022Root Causes 209: One-Day Deployment of CLM
For any Certificate Lifecycle Management platform to succeed, effective deployment is essential. We describe the optimal onboarding process, step by step.
-
Learn More
Deepfake Cybersecurity: What It Is & More
Blog Post from Sectigo
Blog Post Feb 24, 2022With deepfake technology, bad actors can impersonate others and gain access to sensitive data. Learn more about this threat to cybersecurity and how to prevent it.
-
Listen Now
EPISODE 208
Broadcast Date:
February 24, 202210 minutes
Podcast Feb 24, 2022Root Causes 208: HD Radio Error Bricks Automotive Information Systems
Recently automobile infotainment systems were permanently "bricked" by a HD radio flaw. Our hosts describe what happened and the lessons we can learn.
-
Learn More
What Are the Baseline Requirements?
Blog Post from Sectigo
Blog Post Feb 23, 2022For the first decade-plus of their lifespan as a technology, publicly trusted digital certificates operated with little oversight, transparency, or consistency in operating principles. To create predictable, reliable behavior among public Certificate Authorities (CAs) the CA/Browser Forum undertook the creation of its Baseline Requirements, which first went into effect in 2012.