National Security Agency issues guidance on replacing obsolete encryption protocols. The agency says outdated protocols can enable unauthorized network access to nation-state actors and other adversaries. The use of weak, compromised or revoked certificates for TLS can lead to man-in-the-middle attacks. The NSA has released on GitHub a free detection tool for identifying obsolete TLS versions in their systems. In May, the U.S. Cybersecurity and Infrastructure Security Agency warned a North-Korean advanced persistent threat group was using fake TLS protocols to authenticate and encrypt its activities to hide from security tools.”]
Source: https://www.govinfosecurity.com/nsa-releases-guidance-on-obsolete-encryption-tools-a-15711