Back to today’s briefing

Story perspectives

SSL.com Flaw Exposes Sites to Fake Certificates, Action Taken

4/22/2025

33 4

Summary

Story summary

A serious security flaw in SSL.com’s domain validation system has put legitimate websites at risk, allowing fraudsters to issue fake digital certificates. Among the 11 revoked certificates was one for Alibaba. In response, SSL.com is taking swift action by disabling the compromised validation method to protect users from potential phishing attacks.

1 of 1

Story summary

A serious security flaw in SSL.com’s domain validation system has put legitimate websites at risk, allowing fraudsters to issue fake digital certificates. Among the 11 revoked certificates was one for Alibaba. In response, SSL.com is taking swift action by disabling the compromised validation method to protect users from potential phishing attacks.