Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US President's son-in-law may have been hacked twice. Is any of it true, and what does it tell us about the phones in our pockets? Meanwhile, James Ball explains that of the internet’s most trusted security keys were protected by numbers so small that one of them was... four. Yes, "4". And then, of course, to make the week worse we suffered a PHPocalpyse... Plus, Chuck Randolph of 360 Privacy explains how the internet has made it scarily easy to put company executives and public officials in danger. All this and more in episode 490 of the “Smashing Security” podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest James Ball.

The emSign CA certificate was pulled from certifi. A new Python security release updates pip to block MITM risks. Upgrade pip and uv now.

Related Posts:

• iOS 27.1 iPhone Duo Release Targets Foldable Hardware
• OpenAI Cuts Internet Access for Frontier Model Training
• Google Privacy Policy Change Raises Gmail Ad Concerns

The post Python Ships Emergency Releases After emSign CA Certificate Incident appeared first on Daily CyberSecurity.

Learn about the upcoming Windows update certificate rotation in 2027. Ensure your system stays connected to Microsoft servers by installing required patches.

Related Posts:

• Windows 11 Quick Settings Can Now Ring Your Android Phone
• Microsoft Patches Windows 11 Local Account Bypass Loophole
• Windows Hybrid Intelligence and the New AI Search Menu

The post Windows Update Certificate Rotation: Prevent 2027 Failures appeared first on Daily CyberSecurity.

Pega patched a SAML authentication bypass in Pega Platform, rated Critical 9.5 and High 7.0. No CVE, no known compromise. See affected versions and fixes.

Related Posts:

• Actively Exploited Veeam Agent Vulnerability PoC Disclosed
• Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10
• D-Link DIR-822A Vulnerabilities Details and PoC Disclosed

The post Pega Platform SAML Authentication Bypass: Critical 9.5 Flaw Patched appeared first on Daily CyberSecurity.

DigiCert G1 Retirement 2026: A Turning Point in Web PKI Evolution Mozilla and Google Chrome will revoke the G1 root certificates of DigiCert on April 15, 2026. When the certificate you are using TLS chains to one of those roots, the browsers immediately do not trust it. A security warning is shown to your users.Read More

The post DigiCert G1 Root Removal 2026: What It Means, Risks & Action Plan for Your TLS Infrastructure appeared first on EncryptedFence by Certera - Web & Cyber Security Blog.

The post DigiCert G1 Root Removal 2026: What It Means, Risks & Action Plan for Your TLS Infrastructure appeared first on Security Boulevard.

Beginning March 2026, Certificate Authorities (CAs) must verify DNSSEC signatures during CAA evaluation and Domain Control Validation (DCV) if DNSSEC has been enabled on the domain. This change has been approved by the CA/Browser Forum through the CA/B Forum Ballot SC-085v2 (TLS) and SMC014 (S/MIME). With this change, DigiCert has started validating DNSSEC during theRead More

The post DNSSEC Validation for SSL Certificates: CA/B Forum Ballot SC-085 Changes in March 2026 appeared first on EncryptedFence by Certera - Web & Cyber Security Blog.

The post DNSSEC Validation for SSL Certificates: CA/B Forum Ballot SC-085 Changes in March 2026 appeared first on Security Boulevard.