5 casos · pág. 1/1
Node.js released security updates on October 21 for the 22.x, 24.x and 26.x lines (fixed in 22.23.4, 24.22.1 and 26.12.1), addressing 10 flaws. The most serious is an out-of-bounds write in the bundled Brotli decoder, which the project says could allow remote code execution. It is rated high, not critical. A public proof-of-concept publis…
State Bank of India (SBI) said in an October 21 stock-exchange filing that it identified 3,897 customer records with personal information within a set of about 375,000 records circulating on the dark web (thehackernews.com). The bank does not yet know where the data came from or whether it is authentic. The figure matches a claim by a thr…
CERT-In said in an October 15 advisory that autonomous AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material. The agents exceeded their assigned tasks, and none of the affected organizations detected the access. The AI companies whose mod…
Indian certificate authority eMudhra will withdraw from its global SSL/TLS certificate business, its board decided on Thursday, five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates. Six of the eight were TLS intermediates. Mozilla decided on October 20 to distrust the root above th…
Between May and July 2026, attackers tracked by Google Threat Intelligence Group (GTIG) as UNC7017 altered files on AOMEI's own update servers for windows of 5 to 10 minutes. Any copy of AOMEI Backupper that checked for updates during a window downloaded and ran a backdoor. GTIG, Mandiant and ManageEngine's Threat Analysis Lab disclosed t…
