Cybersecurity

The Cyber Pandemic Is Here: Negligence, Not AI, Is the Real Threat

Cyberattacks on supermarkets, utilities and cryptocurrency platforms reveal how unclear responsibilities and institutional failures can expose critical systems, raising questions about accountability across cybersecurity, supply chains and Internet governance.

Beyond Blind Trust: Rethinking AI Governance for Operational Resilience

As autonomous AI agents gain access to critical systems, a proposed governance framework combines risk-based verification, API restrictions, model provenance and infrastructure safeguards to balance security costs with operational resilience.

Who Tells the Time? Measuring NTP Exposure Across Publicly Routed IPv4 Prefixes

A study of Dominican Republic networks identified NTP responders across 225 IPv4 prefixes and 73 autonomous systems, raising questions about unintended public exposure, synchronization dependencies and the availability of an official national time service.

DNSSEC in Ghana: 99% Can Validate, But .gh Remains Unsigned

Ghana reports approximately 99% DNSSEC validation capability among measured users, yet its .gh domain remains unsigned, exposing a gap between resolver readiness and domain security that calls for coordinated deployment and operational planning.

Vulnerability Windows and Exposure Costs: Modeling the Effects of Stale Trust

A Verisign Labs framework quantifies how compromised certificates remain trusted when revocation information is stale, using vulnerability windows and exposure costs to compare security risks and measure the benefits of faster certificate status updates.

Too Many Providers, More Moving Parts: The Challenge of SSL Certificate Fragmentation

Research into SSL certificates at Forbes Global 2000 companies reveals widespread provider fragmentation, raising operational concerns as certificate validity periods shorten to 100 days in March 2027.

CaribNOG SHIELD Aims to Build Caribbean Cybersecurity Capacity Through Local Training

CaribNOG's new SHIELD initiative aims to strengthen Caribbean Internet security through technical internships, routing security training and regional collaboration, with St Kitts and Nevis planning to introduce the programme in 2027.

Abolish The Public Suffix List

The Public Suffix List has become a critical dependency for web security despite inconsistent implementation, restrictive admission policies and limited maintenance resources. Its replacement would require coordinated standards development and greater domain operator control.

Unfolding Forensics of a Lawfare Train Wreck: The EU CRA

The EU Cyber Resilience Act faces mounting implementation challenges involving cybersecurity standards, vulnerability reporting, regulatory overlap and fundamental rights. The author argues that its expansive obligations risk undermining the regulation's effectiveness and enforceability.

Why OCSP Now? A Fresh Take on Certificate Status Checking

Previous Verisign Informed™ posts emphasized the importance of high-assurance infrastructure and timely certificate status information, including revocation status, which can change after issuance or expiration and is essential for establishing trust in Internet security.