Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027

An Ars Technica security RSS collection covering emerging threats and vulnerabilities, including counterfeit TLS certificates, exploited Zimbra command-injection flaws, AI-agent and MCP security risks, ClickFix social engineering, exploit kits targeting Chrome and Windows, major breaches, surveillance-camera compromise, and attacks against government and nonprofit organizations. The collection also includes defensive developments such as shorter Let's Encrypt certificate lifetimes and planned quantum-safe TLS certificates. Several reports describe active exploitation or substantial compromise,