Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027
2026-10-11T20:51:39Z•1d6c95799d82f7d3b2933ad9df69db673903c455a5ac9552e52efcbec5bdb29a
AI agent securityChromeClickFixMCPRSATLS certificatesWindowsZimbraaccount takeoveractive exploitationcertificate authority compromisecryptographydata breachemail theftexploit kitgovernment cybersecuritymalware deliveryprompt injectionquantum-safe TLSremote command injectionscarewaresocial engineeringsupply chain compromisesurveillance cameras
What happened
Ars Technica security feed covering active exploitation, credential and certificate compromise, AI-agent security risks, ransomware and data breaches, exploit kits, social-engineering campaigns, and emerging cryptographic threats. The most immediately actionable items include exploitation of a critical Zimbra flaw to steal email, counterfeit TLS certificates obtained through compromised registries, a Chrome/Windows exploit kit used by multiple groups, and widespread ClickFix infections.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- 1d6c95799d82f7d3b2933ad9df69db673903c455a5ac9552e52efcbec5bdb29a
- Enrichment time
- 2026-10-11T20:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.