Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Didier Stevens

Threat Level: green

Date	Author	Title
CERTIFICATE TRANSPARENCY
2018-09-18	Rob VandenBrink	Using Certificate Transparency as an Attack / Defense Tool
CERTIFICATE
2022-07-06/a>	Johannes Ullrich	How Many SANs are Insane?
2021-10-18/a>	Xavier Mertens	Malicious PowerShell Using Client Certificate Authentication
2020-10-30/a>	Xavier Mertens	Quick Status of the CAA DNS Record Adoption
2020-09-20/a>	Guy Bruneau	Analysis of a Salesforce Phishing Emails
2020-04-10/a>	Xavier Mertens	PowerShell Sample Extracting Payload From SSL
2020-01-15/a>	Johannes Ullrich	CVE-2020-0601 Followup
2018-09-19/a>	Rob VandenBrink	Certificates Revisited - SSL VPN Certificates 2 Ways
2018-09-18/a>	Rob VandenBrink	Using Certificate Transparency as an Attack / Defense Tool
2018-09-05/a>	Rob VandenBrink	Where have all my Certificates gone? (And when do they expire?)
2017-11-23/a>	Xavier Mertens	Proactive Malicious Domain Search
2017-11-11/a>	Xavier Mertens	Keep An Eye on your Root Certificates
2016-01-25/a>	Rob VandenBrink	Assessing Remote Certificates with Powershell
2015-03-26/a>	Daniel Wesemann	Pin-up on your Smartphone!
2015-02-27/a>	Rick Wanner	Let's Encrypt!
2014-08-25/a>	Jim Clausing	Unusual CRL traffic?
2013-08-13/a>	Swa Frantzen	Microsoft security advisories: RDP and MD5 deprecation in Microsoft root certificates
2013-05-17/a>	Johannes Ullrich	SSL: Another reason not to ignore IPv6
2013-05-11/a>	Lenny Zeltser	Extracting Digital Signatures from Signed Malware
2013-04-15/a>	Rob VandenBrink	Oops - You Mean That Deleted Server was a Certificate Authority?
2013-01-03/a>	Manuel Humberto Santander Pelaez	New year and new CA compromised
2012-07-18/a>	Rob VandenBrink	Vote NO to Weak Keys!
2012-06-13/a>	Johannes Ullrich	Microsoft Certificate Updater
2012-02-08/a>	Jim Clausing	Chrome to stop checking Certificate Revocation List (CRL)?
2011-09-19/a>	Guy Bruneau	MS Security Advisory Update - Fraudulent DigiNotar Certificates
2011-09-09/a>	Guy Bruneau	Adobe Publish its List of Trusted Root Certificate - http://www.adobe.com/security/approved-trust-list.html
2011-09-09/a>	Guy Bruneau	Apple Certificate Trust Policy Update
2011-09-08/a>	Rob VandenBrink	When Good CA's go Bad: Other Things to Check in Your Datacenter
2011-02-04/a>	Daniel Wesemann	Oh, just click "yes"
2009-10-09/a>	Rob VandenBrink	THAWTE to discontinue free Email Certificate Services and Web of Trust Service
2009-01-02/a>	Mark Hofman	Blocking access to MD5 signed certs
TRANSPARENCY
2018-09-18/a>	Rob VandenBrink	Using Certificate Transparency as an Attack / Defense Tool
2014-07-15/a>	Daniel Wesemann	AOC Cloud
2012-05-25/a>	Guy Bruneau	Google Publish Transparency Report

CERTIFICATE TRANSPARENCY

CERTIFICATE

TRANSPARENCY