3 casos · pág. 1/1
Certificate authority eMudhra revoked eight intermediate certificates after a researcher known as Wayne found on October 17 that their P-384 private keys were so weak that anyone could recover them almost instantly. The keys, generated in April 2025, had values below 256, so an attacker could recover them by testing 256 candidates. This w…
Between April and July 2026, a threat actor tracked as UNC7017 compromised AOMEI update and notification infrastructure and used it to push malware to users of AOMEI Backupper. The attackers briefly altered two configuration files and restored them within minutes to evade detection. The campaign was uncovered by ManageEngine's Threat Anal…
Huntress published a rapid-response advisory on two leaked critical PHP core vulnerabilities, CVE-2026-109618 and CVE-2026-109619, informally named "php2shell". Both are rated CVSS v4.0 9.2 and are publicly described as remote code execution. The details leaked via a removed Hacker News post, and watchTowr confirmed they are real. The PHP…
