NewsDark Reading
'Certighost' Flaw Haunts Microsoft Active Directory Certificates
Teaser from the source
Microsoft patched a high-severity vulnerability earlier this month that allows a threat actor to escalate privileges and compromise an AD environment.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on Certificates
Other advisories
- Not ratedusn:USN-9001-1ca-certificates update
- MediumCVE-2026-114406Red Hat Enterprise Linux ca-certificates: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
- Not ratedosv:CVE-2026-121434Froxlor 2.3.0 before 2.3.15 Authorization Bypass via Certificates.update API
- LowCVE-2026-118780Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store
- MediumCVE-2026-119189Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage
- Not ratedosv:CLEANSTART-2026-KE54242On most platforms, Go uses the given system root certificates
- Not ratedosv:CLEANSTART-2024-TQ32856When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys
- Not ratedosv:CLEANSTART-2024-DF62846X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain
Other news entries
- Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company DataNewsThe Hacker News
- Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate AuthoritiesNewsCisco PSIRT
- TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of DevicesNewsSecurityWeek
- bunny.net pulls an Armenia CDN node after its hosting provider is breached and reissues TLS certificatesBreachpwn.watch
- Microsoft releases Windows OOB updates to distrust eMudhra certificatesNewsBleepingComputer
- GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session DecryptionNewsThe Hacker News
- Red Hat Enterprise Linux ca-certificates: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenVulnerabilityBSI CERT-Bund
- Compromised TLS CertificatesNewsSchneier on Security
ID