Epstein Files Full PDF

This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these messages) This article contains promotional content. Please help improve it by removing promotional language and inappropriate external links, and by adding encyclopedic text written from a neutral point of view. See our advice if the article is about you and read our scam warning in case someone asks for money to edit this article. (July 2024) (Learn how and when to remove this message) This article contains an excessive amount of intricate detail. Please help improve it by spinning off or relocating relevant information and removing excessive detail that goes against Wikipedia's inclusion policy. (January 2025) (Learn how and when to remove this message) This article may have too many section headings. Please help consolidate the article. (January 2025) (Learn how and when to remove this message) Some of this article's listed sources may not be reliable. Please help improve this article by looking for better, more reliable sources. Unreliable citations may be challenged and removed. (January 2025) (Learn how and when to remove this message) (Learn how and when to remove this message)

Xcitium

Company type	Private
Industry	Computer software
Founded	United Kingdom (1998; 28 years ago (1998))[1]
Headquarters	Bloomfield, New Jersey , United States
Area served	Worldwide
Key people	Melih Abdulhayoğlu (President and Chairman)
Number of employees	1,200+[citation needed]
Website	www.xcitium.com

Xcitium (formerly Comodo Security Solutions Inc.) is a cybersecurity company, including Zero Trust cybersecurity, based in Bloomfield, New Jersey, United States.^[2] In 2022, the company rebranded as Xcitium.^[3] Also formed from the former Comodo Security Solutions was Sectigo, a certificate lifecycle management company based in the US and founded in 2018.^[4]

The company was founded in 1998 in the United Kingdom^[1] by Melih Abdulhayoğlu. It relocated to the United States in 2004. Its products focused on computer and internet security, including the operation of an SSL certificate authority. The firm helped set standards by contributing to the Internet Engineering Task Force DNS Certification Authority Authorization Resource Record.^[5] Francisco Partners in 2017 acquired Comodo Certification Authority from Comodo Security Solutions, Inc., and the next year rebranded it as Sectigo.^[6][7] This new entity announced on June 28, 2018, that it was expanding from TLS/SSL certificates into IoT security with an IoT device security platform,^[8] and a week later a new headquarters for itself in Roseland, New Jersey.^[9] Then on August 16, 2018, it announced it was acquiring CodeGuard, a website maintenance and disaster recovery company.^[10]

Comodo is a member of the following industry organizations:

• Certificate Authority Security Council (CASC): In February 2013, Comodo became a founding member of this industry advocacy organization dedicated to addressing industry issues and educating the public on internet security.^[11][12]
• Common Computing Security Standards Forum (CCSF): In 2009 Comodo was a founding member of the CCSF, an industry organization that promotes industry standards that protect end users. Comodo CEO Melih Abdulhayoğlu is considered the founder of the CCSF.^[13]
• CA/Browser Forum: In 2005, Comodo was a founding member of a new consortium of certificate authorities and web browser vendors dedicated to promoting industry standards and baseline requirements for internet security.^[14][15] Melih Abdulhayoğlu invited top browser providers and certification authorities to a round table to discuss the creation of a central authority responsible for delivering digital certificate issuance best practice guidelines.^[16]

• Comodo Dragon (web browser)
• Comodo Ice Dragon (web browser)
• Comodo Internet Security
• Comodo System Utilities
• Comodo Mobile Security

On 23 March 2011, Comodo posted a report that 8 days earlier, on 15 March 2011, a user account with an affiliate registration authority had been compromised and was used to create a new user account that issued nine certificate signing requests.^[17] Nine certificates for seven domains were issued.^[17] The attack was traced to IP address 212.95.136.18, which originates in Tehran, Iran.^[17] Moxie Marlinspike analyzed the IP address on his website the next day and found it to have English localization and Windows operating system.^[18] Though the firm initially reported that the breach was the result of a "state-driven attack", it subsequently stated that the origin of the attack may be the "result of an attacker attempting to lay a false trail.".^[17][19] The talk by Moxie at Def Con suggested the attacker may have been inexperienced and following online tutorials for man-in-the-middle attacks.^[18]

Comodo revoked all of the bogus certificates shortly after the breach was discovered. Comodo also stated that it was actively looking into ways to improve the security of its affiliates.^[20]

In an update on 31 March 2011, Comodo stated that it detected and thwarted an intrusion into a reseller user account on 26 March 2011. The new controls implemented by Comodo following the incident on 15 March 2011, removed any risk of the fraudulent issue of certificates. Comodo believed the attack was from the same perpetrator as the incident on 15 March 2011.^[21]

In regards to this second incident, Comodo stated, "Our CA infrastructure was not compromised. Our keys in our HSMs were not compromised. No certificates have been fraudulently issued. The attempt to fraudulently access the certificate ordering platform to issue a certificate failed."^[22]

On 26 March 2011, a person under the username "ComodoHacker" verified that they were the attacker by posting the private keys online^[23] and posted a series of messages detailing how poor Comodo's security is and bragging about their abilities.^[24][25] There was at least 4 hacks on Comodo and their certificate reseller that year.^[26]

As of 2016, all of the certificates remain revoked.^[17] Microsoft issued a security advisory and update to address the issue at the time of the event.^[27][28]

In 2009 Microsoft MVP Michael Burgess accused Comodo of issuing digital certificates to known malware distributors.^[29] Comodo responded when notified and revoked the certificates in question, which were used to sign the known malware.^[30]

In October 2015, Comodo applied for "Let's Encrypt", "Comodo Let's Encrypt", and "Let's Encrypt with Comodo" trademarks.^[31][32][33] These trademark applications were filed almost a year after the Internet Security Research Group, parent organization of Let's Encrypt, started using the name Let's Encrypt publicly in November 2014,^[34] and despite the fact Comodo's "intent to use" trademark filings acknowledge that it has never used "Let's Encrypt" as a brand.

On 24 June 2016, Comodo publicly posted in its forum that it had filed for "express abandonment" of their trademark applications.^[35]

Comodo's Chief Technical Officer Robin Alden said, "Comodo has filed for express abandonment of the trademark applications at this time instead of waiting and allowing them to lapse. Following collaboration between Let's Encrypt and Comodo, the trademark issue is now resolved and behind us, and we'd like to thank the Let's Encrypt team for helping to bring it to a resolution."^[36]

• Internet security
• Comparison of antivirus software

• Official website