News - Securetron | ADCS | MSCA | Certificate Management

Client Auth and Server Auth EKU in a Certificate

Posted in Knowledgebase, News. No Comments on Client Auth and Server Auth EKU in a Certificate

Templates | Compliance SaaS | Enterprise | Community Edition The Client-Server Identity Crisis: Why You Shouldn’t Use a Single Certificate for Both Roles Table of Contents Toggle The All-in-One Certificate: A Tempting ShortcutThe Core Problem: Violating the Principle of Least PrivilegeTechnical and Operational HeadachesThe Right Way: Purpose-Built CertificatesWhen Is It Ever Okay to Combine Them?Conclusion: Specialization is a Feature, Not a Bug In the world of PKI and TLS, certificates are the digital passports that prove identity. But what happens when a single passport...

The Weak Link – Auditor General of Canada Warning on PKI and Cryptographic Governance

Posted in News. No Comments on The Weak Link – Auditor General of Canada Warning on PKI and Cryptographic Governance

News | Government Certificate Discovery | Management The Weak Link in Canada’s Cyber Armor: Auditor General of Canada Warning on PKI and Cryptographic Governance A new report from Canada’s Auditor General has issued a stark warning that goes far beyond typical cybersecurity shortcomings. It reveals critical failures in the very foundations that underpin trust and security in government digital services: Public Key Infrastructure (PKI) and cryptography. While the audit doesn’t mention PKI by name, its findings paint a dire picture of the ecosystem in which digital...

Active Directory Certificate Services, asset management, canada, Certification Authority, clm, discovery, PKI, security

Canada Launches PQC Migration Plan to Fortify Government Systems Against Quantum Computer Threats

Posted in News. No Comments on Canada Launches PQC Migration Plan to Fortify Government Systems Against Quantum Computer Threats

ADCS | Compliance SaaS | Enterprise | Community Edition Canada Launches Ambitious Plan to Fortify Government Systems Against Quantum Computer Threats Table of Contents Toggle The Looming Quantum ThreatThe Solution: Post-Quantum Cryptography (PQC)A Phased, Mandatory Migration PlanScope, Shared Responsibility, and ConsequencesA Global Leader in Quantum Preparedness The Government of Canada has officially initiated a sweeping, decade-long mission to future-proof its digital infrastructure against one of the most significant emerging threats in cybersecurity: the power of quantum...

cybersecurity innovation, digital security, lattice-based cryptography, PKI security, Post Quantum Cryptography, PQC cryptography, quantum computing threats, quantum-resistant algorithms, quantum-safe encryption, Securetron PKI Trust Manager

New OpenSSL Vulnerabilities Expose Systems to Key Theft and Remote Code Execution

Posted in News. No Comments on New OpenSSL Vulnerabilities Expose Systems to Key Theft and Remote Code Execution

News October 2, 2025 # Topics OpenSSL Vulnerability Patch Follow Us youtube Learning New OpenSSL Vulnerabilities Expose Systems to Key Theft and Remote Code Execution 02 February, 2021 The OpenSSL Project has released critical security updates addressing three vulnerabilities that could allow attackers to recover private keys, execute arbitrary code, or cause denial-of-service conditions. The patches are available in the newly...

Cve, Cve-2025-9230, CVE-2025-9231, CVE-2025-9232, Open, OpenSSL, SSL

Prevent Ransomware through Code Signing

Posted in Knowledgebase, News. No Comments on Prevent Ransomware through Code Signing

Code Signing | Malware SaaS | Enterprise | Community Edition Fortifying the Digital Frontier: How Code-Signing Certificates and PKI Management Prevent Ransomware Table of Contents Toggle Fortifying the Digital Frontier: How Code-Signing Certificates and PKI Management Prevent RansomwareIntroductionPart 1: The Shield – How Code-Signing Certificates Prevent RansomwareAuthenticationIntegrity1. Blocking Untrusted and Malicious Executables2. Preventing Supply Chain Attacks3. Establishing Accountability and Non-RepudiationPart 2: The Weak Link – The Challenge of Certificate...

ADCS, application, certificate, Certificate Template, cicd, code, code signing, malware, PKI, ransomware, signing, software, timestamp, tsp

How PKI would have prevented Salesloft Breach

Posted in News.

News | mTLS | Risk Applicable: SaaS | Enterprise | Community Edition Salesloft Breach and how PKI eliminates the risk of OAuth token hijacking Table of Contents Toggle IntroductionThe Core Problem: OAuth Token TheftThe Solution: Certificate-Based Client Authentication (mTLS)Part 1: Authenticating the Client with a CertificatePart 2: Binding the Token to the Certificate (The Key Step)How This Addresses TheftStandards and ProfilesBenefits and AdvantagesChallenges and ConsiderationsSummary Introduction Certificates, specifically mTLS (Mutual TLS) certificates, are a powerful mechanism to...

AI Agents, authentication, automation, Breach, certificate, mTLS, OAuth, PKI, sales loft, salesforce, Salesloft