We have seen the first known instance of an AI tool discovering a zero-day vulnerability.  This could have vast implications on vulnerability detection and bug bounty programs.  We discuss the implications.

Root Causes 543: AI Finds a Zero Day

Chain of lure is an attack method used to circumvent restrictions and boundaries placed on AIs.  Jason explains this attack and its implications.

Root Causes 544: What Is Chain of Lure?

The MOSH tool aids the use of SSH-secured sessions, especially across different systems. Jason unpacks the security of this system and how it uses encryption and shared secrets.

Root Causes 545: What Is MOSH?

We are joined by guests Pol Holzmer and Johannes Sedlmeir to describe their recent research that documents and organizes public arguments made about QWAC certificates. You can find this research at https://orbilu.uni.lu/handle/10993/66334.

Root Causes 546: New Research Codifies Arguments for and Against QWACs

In this episode we discuss the value for enterprises in running mass revocation drills and compare the merits of tabletop exercises versus voluntary revocation events.

Root Causes 547: Should We Do Mass Revocation Fire Drills?

We begin a new series about what we expect from AI in the next three years.  In this episode we discuss AI emulating emotional intelligence and its benefits.

Root Causes 548: AI 1000 Days from Now - Emotional Intelligence

In our ongoing series on AI in 1000 days, we describe the inevitable, complete distrust of voice printing as an authentication method, including why and what we think will happen.

Root Causes 549: AI 1000 Days from Now - the Defeat of Voice Authentication

Certificate maximum term is shrinking.  In this episode we examine exactly how short they could get.

Root Causes 550: WebPKI Certificate Lifespan - How Low Can You Go?

Jason explores the role cryptography and trust systems play in the command and control of groups of autonomous drone systems.

Root Causes 551: PKI in a Swarm at 50 mph

We share our PKI predictions for 2026. Topics include PQC, eIDAS 2, CT logging, ACME, passkeys, CA distrust, AI model poisoning, and new attack vectors.

Root Causes 552: 2026 Predictions

Digital certificate industry veterans Tim Callan and Jason Soroko explore the issues surrounding digital identity, PKI, and cryptographic connections in today's dynamic and evolving computing world. Best practices in digital certificates are continually under pressure from technology trends, new laws and regulations, cryptographic advances, and the evolution of our computing architectures to be more virtual, agile, ubiquitous, and cloud-based. Jason and Tim (and the occasional guest subject matter expert) will help you stay current on developments in this essential technology platform and to understand the whys and wherefores of popular Public Key Infrastructures.

New tracks tagged #pki