Emsisoft Urges Immediate Updates and System Reboots Following Certificate Mishap

Endpoint Security Emsisoft Tells Users to Update Products, Reboot Systems Due to Certificate Mishap

Background

On September 8, 2023, endpoint security firm Emsisoft urged its users to update their anti-malware and other security products and reboot their systems. This announcement comes after the company discovered they had signed their products with an improperly issued digital certificate. The certificate in question is the Extended Validation (EV) code signing certificate, which was renewed on August 23 and used to sign all program files compiled after that date. This includes the latest software version released on September 4.

Certificate Mishap and Impact

The issue with the certificate lies in the fact that the certificate authority (CA), GlobalSign, had introduced the wrong business number upon issuance. As a result, the certificate needs to be revoked and reissued. GlobalSign has already provided Emsisoft with a new certificate and is in the process of revoking the improperly issued one. Emsisoft has re-signed all files using the correct certificate and made updates available for its products.

However, a significant concern arises from the fact that the security firm had also used the improperly issued certificate to sign a new driver component. Updating the driver component requires a system reboot. If a certificate is revoked, all software files signed with it will produce a security warning, and drivers may not load at all. This can essentially break the protection provided, including the ability to run online updates.

Advice and Recommendations

Considering the potential impact of the improperly issued certificate, Emsisoft is strongly advising all its users to update their security products and reboot their systems before September 22, 2023. By enabling automatic updates in Emsisoft Anti-Malware, Emsisoft Business Security, and Emsisoft Enterprise Security, users can ensure they receive the new version with the correct certificate before the old certificate is revoked.

In the event that a user encounters a security warning or experiences issues with loading drivers due to the revoked certificate, Emsisoft recommends reinstalling the affected software to restore the protection. This step may be necessary to maintain the integrity and functionality of the security products.

Internet Security and the Trust in Digital Certificates

The incident involving Emsisoft‘s certificate mishap highlights the critical role that digital certificates play in internet security. Digital certificates serve as a means to verify the authenticity of software and ensure that it has not been tampered with. When a certificate is improperly issued or compromised, it could potentially open the door for malicious actors to impersonate legitimate software and bypass security measures.

This incident should serve as a reminder of the importance of proper certificate management and the need for vigilance in ensuring that certificates are issued and deployed correctly. Certificate authorities and organizations alike must implement robust protocols and practices to prevent such mishaps and continually monitor their certificate infrastructure for any signs of compromise.

Editorial

This incident raises questions about the reliability of the current system of digital certificates and the certificate authorities that issue them. While certificates are meant to enhance security measures and provide a level of trust in software, they are ultimately reliant on the processes and diligence of the certificate authorities. The slightest oversight or mistake during the certificate issuance process can have significant consequences, as seen in the case of Emsisoft.

Given the increasing sophistication of cyber threats and the importance of securing software, it is imperative that certificate authorities prioritize the integrity and accuracy of their operations. Organizations like Emsisoft must also hold certificate authorities accountable by conducting thorough due diligence and auditing their certificates regularly.

Conclusion

In light of the certificate mishap, Emsisoft has taken swift action to rectify the situation and ensure the integrity of their security products. By urging users to update their software and reboot their systems, the company is taking proactive steps to mitigate any potential risks associated with the revoked certificate.

This incident serves as a reminder for both users and organizations about the critical role that digital certificates play in maintaining internet security. It underscores the need for continuous vigilance and rigorous processes to safeguard against certificate mishaps and maintain trust in software. By adhering to best practices and staying updated on security advisories, users can help protect themselves against potential vulnerabilities that may arise from certificates and ensure the robustness of their overall security posture.