countries_code:IN × criticity:critical × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · há 6h · 7 fontes · 8 atualizações critical

eMudhra: eight intermediate CA keys trivially recoverable (P-384, values below 256); browsers, Go, Apple, Microsoft block them

Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated in April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge browser-trusted certificates for any domain. A researcher credited as Wayne reported …

CVE-2026-111943 technology certificate authorities

thehackernews.com · há 1d exploit público critical

Weekly Recap: BeyondTrust 0-day by Armory Castle, Ledger supply-chain implants, French refrigeration attacks, ConnectWise breach

This weekly recap covers several concurrent incidents. ConnectWise disabled seven application identities and suspended Cloud Backup after unknown actors abused them to compromise Microsoft 365 tenants. China-nexus Armory Castle (UNC5221 / Warp Panda) exploited BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) as a zero-day in lat…

CVE-2026-102764 CVE-2026-110447 CVE-2021-36260 Armory Castle UNC5221 retail technology