DigiCert Revokes Certificates After Support Portal Hack
Overview
DigiCert, a prominent certificate authority, has revoked a number of certificates after a security breach involving its internal support portal. Hackers managed to deliver malware through a customer chat channel, which infected an analyst’s system. This breach allowed them access to sensitive internal systems, raising concerns about the security of the certificates issued by DigiCert. The incident highlights significant vulnerabilities in customer support systems, emphasizing the need for stronger security measures in such environments. Companies relying on DigiCert for SSL certificates may need to assess the implications of this breach on their own security postures.
Key Takeaways
- Affected Systems: DigiCert certificates
- Action Required: Revocation of compromised certificates and review of internal security protocols.
- Timeline: Newly disclosed
Original Article Summary
Hackers delivered malware via a customer chat channel, infected an analyst’s system, and accessed the internal support portal. The post DigiCert Revokes Certificates After Support Portal Hack appeared first on SecurityWeek.
Impact
DigiCert certificates
Exploitation Status
The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.
Timeline
Newly disclosed
Remediation
Revocation of compromised certificates and review of internal security protocols.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Malware.