Certificate Transparency: Detecting Malicious Certificates and Phishing Attacks
Explore Certificate Transparency to protect your website from impersonation attacks. Learn integration techniques for monitoring systems and detecting malicious TLS certificates.
Hacking, Certificate Transparency, and TruffleHog - A Discussion with InsecureNature
Insightful discussion on hacking techniques, security tools, and bug bounty strategies, featuring expert insights on Certificate Transparency and TruffleHog for enhanced cybersecurity practices.
Attack Surface Management Series - Certificate Transparency
Learn about Certificate Transparency in attack surface management, exploring its importance and implementation in cybersecurity strategies.
Securing the Software Supply Chain - Go Checksum Database
Exploring Go's checksum database design to secure software supply chains, addressing vulnerabilities in third-party dependencies and enhancing ecosystem integrity.
Privacy-preserving Approaches to Transparency Logs
Explore append-only transparency logs, their applications in infrastructure, and privacy-preserving techniques to balance immutability with user rights and data protection.
The Digital Trust Journey: From Key Generation to Signed Certificate
Explore the creation process of digital certificates, from key generation to CA signing. Understand the critical steps ensuring trust and security in online interactions.
Package Transparency for WebAssembly Registries
Explore WebAssembly package distribution with warg, a new registry protocol offering enhanced supply chain security through Package Transparency, verifiable data structures, and easy detection of operator compromise.
WAVE: A Decentralized Authorization Framework from Transparency Logs
Explore decentralized authorization with WAVE, a framework leveraging transparency logs. Learn about challenges, graph-based approaches, and comparisons to traditional systems.
CertGraph - A Tool to Crawl the Graph of SSL Certificate Alternate Names Using Certificate Transparency
Explore SSL certificate security, Certificate Transparency, and CertGraph tool for domain enumeration. Learn to protect your organization and uncover hidden information in SSL certificates.
Building a Predictive Pipeline to Rapidly Detect Phishing Domains
Learn to build a predictive pipeline using Python and machine learning to detect phishing domains in real-time, leveraging Certificate Transparency logs and supervised learning techniques.
Cats in My Certificate Transparency Logs
Explore Certificate Transparency logs: their purpose, functionality, and potential misuse. Learn about SCTs, public keys, and novel applications, including finding cat pictures online.
Does Certificate Transparency Break the Web? Measuring Adoption and Error Rate
Exploring Certificate Transparency adoption, challenges, and impact on web security. Analyzes deployment strategies, error rates, and lessons for future large-scale security implementations.
Community Integrations and Other Works in Progress
Explore community-driven integrations and initiatives in cloud-native computing, including authentication extensions, user privacy, certificate transparency, and SPIFFE integration with Parsec.
PKI for Gophers
Explore Go primitives for PKI, including certificate hierarchies, mTLS, hardware-backed keys, and public infrastructure. Dive into automated issuance, revocation, and custom PKI implementation.
Modern Security Standards
Explore modern web security standards and features to enhance protection and simplify implementation. Learn about Content Security Policy, STS, PKP, and more for robust online security.
Exploiting Cloud Connectivity to Compromise Network-Attached Storage Devices
Uncover critical security vulnerabilities in NAS devices through cloud connectivity exploitation, focusing on WD and Synology systems' authentication weaknesses and remote access vulnerabilities.