Home Blog Page 174

Elastic achieves AWS Government ISV Partner Competency, strengthening public sector solutions portfolio

Elastic has earned the AWS Government ISV Partner Competency. This recognition validates Elastic's expertise in delivering Search AI solutions that help government agencies modernize operations, enhance security, and improve citizen services on AWS. - Read more

We Issued Our First Six Day Cert

Earlier this year we announced our intention to introduce short-lived certificates with lifetimes of six days as an option for our subscribers. Yesterday we issued our first short-lived certificate. You can see the certificate at the bottom of our post, or here thanks to Certificate Transparency logs. We issued it to ourselves and then immediately revoked it so we...

2024 Vulnerability Scanning Surges 91%

Scans intensify, looking for a critical vulnerability in TBK DVR devices. - Read more

Encryption for Everybody

2025 marks ten years of Let’s Encrypt. Already this year we’ve taken steps to continue to deliver on our values of user privacy, efficiency, and innovation, all with the intent of continuing to deliver free TLS certificates to as many people as possible; to deliver encryption for everybody. And while we’re excited about the technical progress we’ll make this...

Scaling Our Rate Limits to Prepare for a Billion Active Certificates

Let’s Encrypt protects a vast portion of the Web by providing TLS certificates to over 550 million websites—a figure that has grown by 42% in the last year alone. We currently issue over 340,000 certificates per hour. To manage this immense traffic and maintain responsiveness under high demand, our infrastructure relies on rate limiting. In 2015, we introduced our...

AI-powered fraud detection: Protecting financial services with Elastic

Discover how Elastic uses AI and ML to revolutionize fraud detection in financial services. From real-time anomaly detection to predictive analytics, learn how institutions can combat fraud, ensure compliance, and enhance trust with our solutions. - Read more

Ending Support for Expiration Notification Emails

Since its inception, Let’s Encrypt has been sending expiration notification emails to subscribers that have provided an email address to us. We will be ending this service on June 4, 2025. The decision to end this service is the result of the following factors: Over the past 10 years more and more of our subscribers have been able to put...

Continued Scanning for CVE-2023-1389

TP-Link draws the attention of the US Government. - Read more

Announcing Six Day and IP Address Certificate Options in 2025

This year we will continue to pursue our commitment to improving the security of the Web PKI by introducing the option to get certificates with six-day lifetimes (“short-lived certificates”). We will also add support for IP addresses in addition to domain names. Our longer-lived certificates, which currently have a lifetime of 90 days, will continue to be available alongside...

Elastic recruiters reveal how to stand out in your job search

We asked Elastic recruiters for their best tips on how to stand out in the application and interview process and how they advise their candidates. Here’s what they had to say. - Read more

Latest article

Yarbo Android/iOS Mobile Application and Cloud Infrastructure

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain hard-coded credentials, gain access to telemetry data, and potentially send operational commands...

Check Point VPN Authentication Bypass Vulnerability

What is the Vulnerability? A critical authentication bypass vulnerability, CVE-2026-50751 (CVSS...

CISA tells agencies to patch smarter, not harder — foreshadowing broader industry practice

Security teams’ patching practices have come under intense pressure over the past year, as active exploitation is up, time-to-exploit windows...