DigiCert's archived customer data sat behind a door nobody checked
Show notes
Morning edition, Friday 6 November 2026
DigiCert says a server migration left an internal system open to the internet for about 17 months, and outsiders read archived customer records and some ID documents. The lesson is about network walls doing the job of access control. Plus a poisoned security update and a joint regulator warning on AI agents.
Sources
- BleepingComputer: DigiCert data breach exposes customer information, identity documents
- DigiCert incident report, Mozilla Bugzilla bug 2084460
- SecurityWeek: Malicious cPGuard updates served in OpsShield supply chain attack
- OpsShield advisory: cPGuard update channel compromise
- DRCF joint statement: Protecting people and businesses in an agentic economy
- DailyAI: UK regulators say firms can't blame their AI agents