Compromised TLS Certificates
Compromised TLS Certificates The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
SAP lets AI play key role in its certification renewal process
if ( !emtpy($headline_subheadline ) ) : ?> The SAP Stay Certified program now offers an optional AI-based way to perform...
eMudhra quits global TLS certificate market after compromise of CA signing keys
if ( !emtpy($headline_subheadline ) ) : ?> Security experts urge organizations to review certificate dependencies beyond browsers as trust-store changes...
7 out-of-sight Googlebook highlights
if ( !emtpy($headline_subheadline ) ) : ?> Some of the Googlebook's most interesting features are the ones you barely hear...
URGENT – PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
Swati KhandelwalOct 23, 2026Vulnerability / Web Security PHP has warned of another way an attacker could run code on a...
Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
Ravie LakshmananOct 23, 2026Malware / Cyber Espionage The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to...
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Swati KhandelwalOct 23, 2026Vulnerability / Web Security Pillow, the most widely used image library for Python, can be made to...
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Swati KhandelwalOct 23, 2026Vulnerability / Web Security Malicious Brotli data can make an application on an official build of Node.js...
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token...
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
Executive summary This report analyzes activity during which UAC‑0099 gained initial access on July 16th, 2025 and handed it off...
Azul issues urgent Java security updates following eMudhra certificate compromise
Azul has issued an out-of-cycle security update after the compromise of eight eMudhra intermediate Certificate Authority (CA) certificates, publicly disclosed...
With a civilian excuse, China is collecting militarily useful weather data abroad
A global meteorological warning system has become an excuse for China to embed AI-feeding weather stations on foreign territory, gathering...
China’s infrastructure advantage could shape Southeast Asia’s AI choices
China is positioning itself to become a key provider of the infrastructure underpinning Southeast Asia’s AI ambitions. Chinese companies are...
.png "53% vs.19%: The budget divide separating AI leaders from everyone else")
53% vs.19%: The budget divide separating AI leaders from everyone else
IDC research reveals that organizations achieving the strongest AI and business outcomes invest nearly three times more of their IT...
Australia sanctions North Korean IT worker bosses and financiers
Key points Australia has sanctioned two North Korean individuals, Yu Pu Ung and Sim Hyon Sop, and two companies, Korea...
