jawad
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Tragically simple private keys used by a certification authority based in India have been compromised, meaning the 60-million-plus certs it has issued can’t be trusted and necessitating a massive clean-up…
Palo Alto’s firewall OS has been under attack from multiple ransomware groups since June
Multiple ransomware groups, including Qilin and Inc, have been exploiting a high-severity authentication bypass bug in Palo Alto Networks’ PAN-OS, with Unit 42 investigating attacks since early June across numerous…
Swamped curl maintainers take low-level flaws public to survive vulnerability ‘avalanche’
An “avalanche of vulnerability reports” is forcing curl to move lower-severity cases into public view, reserving private handling for high and critical flaws. From October 26, low and medium-severity reports…
‘Password1’ and a forgotten test account land Welsh outfits in hot water
A test account protected by “Password1” helped an intruder steal personal data relating to 3,300 people, mostly children, in a ransomware attack that has drawn regulatory rebukes for two Welsh…