Gaining Control over Your Digital Certificates | Qualys
Summary: At RSA Conference 2018, Qualys Director of Product Management Asif Karel said most organizations lack full, continuously updated inventories of their digital certificates, and Qualys SSL Labs' SSL Pulse rated 43% of 150,000 monitored websites as having inadequate security, citing expired certificates, weak cipher suites and obsolete protocols such as SSLv2, SSLv3 and TLSv1. Karel cited a Gartner prediction that 70% of network attacks against enterprises will hide in encrypted traffic by 2020, and a Ponemon Institute figure that the average Global 5000 company spends $15 million to recover from a certificate-related outage plus $25 million in compliance-related costs.
Bottom line: The failure mode is not a sophisticated attacker but an unmanaged inventory: certificates expire unnoticed, DevOps teams buy them from free services outside IT's view, and spreadsheets go stale, with a $15 million outage recovery bill and $25 million in compliance costs waiting at the end of that gap.
Read the original at Qualys Blog ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026