UPDATE: This has now been fixed. I’ve amended this post to reflect that.
If you ran the Cobalt Strike update program today, you may have seen an error message about the failed SSL certificate verification for www.cobaltstrike.com:
The update program pins the certificate for this server. When the certificate does not match what the update expects, the update program gives a warning. This is by design and is so that you can be confident that you’re getting the update from HelpSystems.
The change that caused the error has been reverted and the issue has been addressed. No further action is required on your part, and updates should now be working again.
We’d like to offer our sincere apologies for any inconvenience that this issue caused, and thank you for your patience while the issue was resolved.
