Setting up Your Own Certificate Authority for Development: Why and How.

Some tips on setting up your own internal certificate authority using the smallstep CA.

https://isc.sans.edu/diary/Setting%20up%20Your%20Own%20Certificate%20Authority%20for%20Development%3A%20Why%20and%20How./32092

Animation-Driven Tapjacking on Android

Attackers can use a click-jacking like trick to trick victims into clicking on animated transparent dialogs opened from other applications.

https://taptrap.click/usenix25_taptrap_paper.pdf

Adobe Patches

Adobe patched 13 different products yesterday. Most concerning are vulnerabilities in Coldfusion that include code execution and arbitrary file disclosure vulnerabilities.

https://helpx.adobe.com/security/security-bulletin.html