TLS

Security Blogs

Compromised TLS Certificates

AndyC 23 October 2026

Compromised TLS Certificates The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra...

MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration

AndyC 23 October 2026

Executive summary This report analyzes activity during which UAC‑0099 gained initial access on July 16th, 2025 and handed it off to Sandworm, which then conducted...

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

AndyC 22 October 2026

Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across the internet.Photo-Illustration: Jobanny Cabrera; Getty...

‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

AndyC 22 October 2026

The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could...

AI Guardrails Aren’t Stopping Criminal Hackers

AndyC 22 October 2026

Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes.Photo-Illustration:...

A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse

AndyC 22 October 2026

The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assistant.In the month...

She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family

AndyC 21 October 2026

To escape the chaos of her Russian childhood, Lili Infante became an American law enforcement prodigy. She pioneered the DEA’s investigations of the dark web—never...