Cybersecurity

Why OCSP Now? A Fresh Take on Certificate Status Checking

Previous Verisign Informed™ posts emphasized the importance of high-assurance infrastructure and timely certificate status information, including revocation status, which can change after issuance or expiration and is essential for establishing trust in Internet security.

Africa’s Digital Health Growth Exposes the Need for Stronger Cybersecurity Governance

As African healthcare systems adopt digital technologies, cybersecurity governance becomes essential to patient safety. Evidence from Ghana highlights gaps in institutional accountability, staff awareness and implementation, underscoring the need for stronger oversight and resilience.

Who Checks the Models? The Case for UN Oversight of Frontier AI

As AI agents demonstrate increasingly autonomous behavior, Gabriel Accascina proposes a UN-led evaluation system modeled on WHO prequalification, using independent testing and government procurement incentives to strengthen international oversight of frontier AI.

From Verification to Trust: Refreshing the Security Status Quo

Digital signatures, introduced by Whitfield Diffie and Martin E. Hellman in 1976's "New Directions in Cryptography," have provided the cornerstone of the internet's cybersecurity apparatus for decades. Every moment of every day, behind the scenes of nearly every secure online interaction, these signatures enable critical trust decisions made across the globe.

Verisign Informed™ Is a New High-Assurance Solution for Validating Trust

Earlier today, Verisign announced the launch of Verisign Informed, a new solution -- backed by Verisign's high-assurance infrastructure -- that combats the threat of "stale trust" in digital certificates by enabling critical trust decisions to be made using the most current status information available.

Africa Is Adopting AI but Who Is Governing the Risks?

African institutions are adopting AI across public services and business, but effective deployment requires governance structures that address cybersecurity, accountability, procurement, digital sovereignty, regulatory coordination and institutional capacity.

Why Africa Keeps Relearning the Same Digital Lessons

Africa's digital transformation challenge is not a lack of strategies or research, but weak institutional learning that prevents governments from preserving project lessons, applying evidence and avoiding repeated failures across administrations and technology programs.

EU Cyber Resilience Act Costs and Economic Impact

The EU Cyber Resilience Act faces questions over its economic impact as third-party estimates point to substantial compliance costs, competitive pressures and unresolved concerns about whether its requirements meet established proportionality and competition norms.

Taming Shadow AI: Closing the Context Gap in Enterprise AI Security

Shadow AI exposes sensitive enterprise data when employees use unsanctioned AI tools. Context-aware guardrails can reduce leakage and false positives by combining deterministic rules, contextual inspection, graduated enforcement and centralized observability.

Why Container Security Is Still Fighting Yesterday’s Battle

Rule-based container security can miss attacks that evade predefined patterns, prompting an argument for behavioral detection that models activity across Kubernetes workloads and control planes while retaining rules for known threats.

Two Years After His Arrest, Pavel Durov Wants to Run His Own Registry

Telegram says it has applied for .gram, potentially giving a billion users DNS addresses while putting its governance, abuse controls, legal exposure and infrastructure under scrutiny as ICANN prepares to reveal applications.

How Domain Abuse, Social Media, and AI Fuel Brand Attacks

CISOs expect social media impersonation to become their leading cybersecurity threat as attackers increasingly combine AI-enabled deception, executive impersonation, and domain abuse across multiple channels to conduct fraud and steal sensitive information.

Building Digital Operations Across Borders: Regulation, Security & Internet Governance

Building a technology operation in India showed that regulation, governance, security, people and technology work best as one operating environment, with compliance, access controls and local autonomy designed in from the outset.

From Forgotten to Exploited: How AI Changes the Dangling DNS Threat

Dangling DNS records can expose trusted corporate subdomains to takeover, while AI-assisted reconnaissance makes abandoned resources easier to find, increasing the need for continuous DNS monitoring rather than periodic audits.

Digital Embassies: Could Africa Rethink Digital Sovereignty?

Estonia's data embassy model offers African governments a different approach to digital sovereignty, combining cross-border infrastructure, legal safeguards and geographic redundancy to keep critical state systems secure, recoverable and operational during major disruptions.