Certificate Validation
The latest Certificate Validation coverage — news, analysis, and updates from the WindowsNews.AI desk.
After Year-Long Silence, Dreame Patches Smart Home Apps Vulnerable to Credential-Theft Attacks
Dreame Technology has finally released a patch for its popular smart home applications after researchers exposed a certificate validation flaw that left millions of users defenseless against...
Hitachi Energy MicroSCADA X SYS600 flaws enable remote exploits; CVE-2023 patches urged for grid safety.
Hitachi Energy’s MicroSCADA X SYS600, a widely used platform in power automation and industrial control systems (ICS), has recently come under scrutiny due to newly discovered cybersecurity...
Critical Windows Server 2025 bugs fixed as June Patch Tuesday targets Kerberos and Credential Guard exploits.
Microsoft's June 2025 Patch Tuesday has delivered crucial security updates addressing multiple critical vulnerabilities in Windows Server 2025, particularly affecting Active Directory authentication...
Enhancing Security in Windows Application Control: New Certificate Authority Handling Explained
Introduction Microsoft has recently introduced significant changes to Windows Application Control for Business, focusing on a new Certificate Authority (CA) handling logic. This overhaul aims to...
April 2025 Windows Server Update Triggers Authentication Failures: Comprehensive Guide to Mitigation and Resolution
Overview Microsoft's April 2025 Windows Server update has led to widespread authentication failures impacting enterprise environments worldwide. Although the update was designed to bolster security,...
April 2025 Windows Update Disrupts Kerberos Authentication: Causes, Impacts, and Solutions
Overview In April 2025, Microsoft released a security update aimed at addressing a critical vulnerability in Kerberos authentication, identified as CVE-2025-26647. This update, however, led to...
Sungrow HV Vulnerabilities: Critical Risks to Infrastructure & Windows Systems
In the ever-evolving landscape of cybersecurity, critical infrastructure remains a prime target for malicious actors, and recent vulnerabilities in Sungrow’s high-voltage (HV) systems have brought...
Critical Vulnerabilities in Sungrow's Solar Tech Expose Millions to Remote Takeover
A security storm is brewing in the renewable energy sector as critical vulnerabilities surface in Sungrow's iSolarCloud mobile application and WiNet-S dongle firmware, exposing millions of...
CISA Warns: Critical RadiAnt DICOM Viewer Bug Exposes Medical Data to MITM Attacks
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding a certificate validation vulnerability in RadiAnt DICOM Viewer, a widely used medical imaging...
CISA Warns of Critical Vulnerability in MicroDicom DICOM Viewer: Healthcare Security at Risk
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a critical vulnerability in MicroDicom DICOM Viewer, a widely used medical imaging software. This...