Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027

Ars Technica security feed covering active exploitation, unauthorized TLS certificates, AI-agent security flaws and abuse, ransomware and data breaches, exploit kits, phishing and ClickFix campaigns, surveillance-camera compromise, and emerging cryptographic risks. The most urgent items involve actively exploited Zimbra command-injection vulnerabilities, counterfeit certificates obtained through domain-registry compromise, AI-assisted account compromises, and browser/Windows exploit kits. No specific CVE identifiers are provided in the feed metadata.