The Digital Transformation Age Is Dawning: Do You Know Where Your Certificates Are? | Qualys
Summary: Qualys SSL Labs' SSL Pulse, monitoring 150,000 websites, rated about 43% as having inadequate security in its May report, citing 5,500 expired and 6,000 soon-to-expire certificates, 5,000 weak cipher suites, and obsolete protocols including 20,000 uses of SSLv2/SSLv3 and 120,000 of TLSv1. A mid-May Comodo study found more than 1 million distrusted SSL/TLS certificates from Symantec still in use, and Qualys Director of Product Management Asif Karel said most organizations lack full certificate inventories, relying on manual processes like spreadsheets.
Why it matters: Ponemon Institute figures cited here put the average Global 5000 company's cost at $15 million to recover from a certificate-related outage and another $25 million in compliance costs - and Gartner predicted 70% of network attacks against enterprises would hide in encrypted traffic by 2020.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026