Hostname Mismatch and SAN Sprawl
At a private wedding, the bouncer has a list. Names of approved guests. They check each arrival against the list. If your name's on it, you're in. If it isn't, you're not, even if you're standing next
Tagged “vulnerabilities”
BEAST Attack (Browser Exploit Against SSL/TLS)
Imagine standing behind someone at an ATM. They type their PIN. You can't see the screen, but you can see their finger movements - which row of the keypad they hover over before pressing. Combined wit
Chain Validation Pitfalls (And Why Cross-Signing Bites)
When you write a letter of recommendation, the letter only works if the recipient recognises the recommender. A letter from Dr. Smith means something to the admissions committee that knows Dr. Smith.
ROBOT Attack (Return Of Bleichenbacher's Oracle Threat)
Imagine a safe with a slightly badly designed combination keypad. When you enter the wrong combination, the safe doesn't just say "wrong." It says - by the sound of the latch, the speed of the locking
Certificate Revocation in 2026: CRL, OCSP, CRLite, and What's Coming
How TLS certificate revocation works in 2026 - CRL, OCSP, OCSP stapling, and browser-pushed lists like CRLite - what's broken about it, why OCSP is winding down, and what your team should actually do about it.
Heartbleed (CVE-2014-0160)
Imagine paying for a coffee at a café. You give the cashier a £5 note. They give you £3.50 in change, plus - because they're not paying attention - a small handful of receipts, business cards, and wha
The Post-Quantum TLS Migration Playbook for Enterprises
A homeowner in a coastal region doesn't wait until the storm is on top of them to put up shutters. They watch the forecast. When a serious hurricane is named - even if it's still days out, still uncer
Weak Cipher Suites Still Running in Production
Most gym lockers have a padlock. The padlock clicks shut. It looks secure. To anyone glancing at it, the locker is locked. To anyone with a YouTube video and ninety seconds, it isn't.
Subscribe via RSS.