SafeTech Lab Expands SafeTech CA with CDM Module for Automated Certificate Delivery and Renewal
SafeTech Lab has expanded its corporate Certificate Authority platform SafeTech CA with a new Certificate Delivery Management (CDM) module. The enhancement enables the system to handle the full lifecycle of digital certificates, including issuance, delivery to target devices, installation into appropriate stores, and automatic renewal.
Previously, organizations often relied on custom scripts, manual processes, or separate heavy PKI solutions to manage these tasks. With CDM, the first agent-based subsystem inside SafeTech CA, administrators centrally control agents that independently issue certificates on target nodes, monitor expiration dates, and trigger updates.
The module supports GOST algorithms and does not depend on domain infrastructure, allowing agents to operate in isolated network segments and environments without an LDAP directory. Developers position CDM as a compact alternative to large PKI platforms that are frequently purchased just for basic certificate functions.
All issuance, delivery, and renewal operations are now unified within a single SafeTech CA product. The update also introduces rotation of root and subordinate CA certificates without losing trust in previously issued certificates. Configuration settings can now be modified through a web interface instead of manual file edits.
SafeTech CA has been integrated with HashiCorp Vault, enabling centralized storage and rotation of passwords and credentials for external services and databases. This reduces the risk of credentials remaining in plaintext within configuration files.
In the future, SafeTech Lab plans to increase agent autonomy, allowing administrators to manually trigger certificate issuance and delivery via the web interface and monitor task execution in real time.
Related articles
Corporate Boomerang: WordPress Founder Matt Mullenweg Survives Board Coup at Automattic
Automattic experienced a rapid corporate power struggle when its board placed founder and CEO Matt Mullenweg on forced paid leave. Within two days Mullenweg regained control by leveraging his shareholder voting rights and removed opposing administrators from the company Slack. The original board members who supported his ouster are now departing the company. The brief conflict highlighted how corporate governance rules allowed shareholders to ultimately determine board composition. Mullenweg described his restored position as that of a pirate before announcing renewed alignment with the board. Public support from WordPress leadership helped solidify his return to leadership.
Russian Transport Ministry Ready to Provide Regulatory Framework for Poplar Fluff Vacuum Robots
The Russian Ministry of Transport has signaled readiness to develop necessary regulations if municipal services express interest in specialized robots designed to collect poplar fluff from city streets. The statement from Minister Andrey Nikitin follows a viral meme that originated from a two-year-old video created by the agency Out Digital. Although no real machines called пухосос exist and no serial production has been launched, the fictional concept gained widespread attention after being presented as an actual Moscow development. The Department of Housing and Utilities in Moscow playfully expanded the joke by introducing additional fictional devices named Zasosyor, Musorozhor, and Gazonyukh. Linguistic experts at Gramota.ru later analyzed the newly coined term, further amplifying the meme's reach across Russian media and social networks. The minister emphasized that any future regulatory support would depend entirely on demand from communal services rather than proactive development by the ministry itself.
Context is Everything: How to Avoid Drowning in Security Incidents and Distinguish Employees from Attackers
The article explains that false positives in security systems often stem from missing business context rather than technical flaws. It outlines three levels of filtering that combine process rules, access logs, and job-specific behavior to rank risk accurately. Behavioral analysis tools like UEBA can help but require proper training and human oversight to avoid generating more noise. Key metrics focus on reducing false alerts, improving MTTD and MTTR, and minimizing daily administration time. For smaller companies without dedicated SOC teams, the guidance emphasizes starting with log collection, identifying existential risks, and aligning policies with real business processes. The piece stresses that technology alone cannot replace analysts who deeply understand company operations.
redb 4.0 Released: XML Routes, Lazy References, Unique Keys and WS-Trust Across the Ecosystem
The redb ecosystem has delivered a major simultaneous release across all core components, bringing redb.Core, redb.Route, redb.Tsak and redb.Identity to version 4.0.0. The update introduces declarative XML routing, lazy object references, unique key constraints, and a full WS-Trust SOAP facade while closing multiple security issues reported through external audits and community feedback. Seventy-six NuGet packages, seven container images and platform archives for Windows and Linux are now available, with the Pro edition remaining free and license-free throughout the 4.x line. Significant internal changes include a unified expression language, support for modern data formats such as Protobuf and Avro, and improved handling of distributed caches and OpenTelemetry metrics. Security hardening covers header sanitization in all identity facades, consent-page protections, dashboard access controls and a switch to bcrypt password hashing. Existing clusters must be stopped before upgrade because mixed versions are not supported, and large databases require a maintenance window for schema changes and partial index creation.