/
latest_source_host:securityweek.com × victim_sectors:technology × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · · 7 fontes · 8 atualizações critical

eMudhra: eight intermediate CA keys trivially recoverable (P-384, values below 256); browsers, Go, Apple, Microsoft block them

Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated in April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge browser-trusted certificates for any domain. A researcher credited as Wayne reported …

CVE-2026-111943 technology certificate authorities
securityweek.com · critical

ConnectWise suspends cloud services after compromised Cloud Backup credential used to access hundreds of Microsoft 365 tenants

ConnectWise suspended its Cloud Backup (formerly SkyKick), SaaS Security and Cloud Management services on October 17-18 after attackers abused a compromised application credential to access customers' Microsoft 365 tenants. Huntress saw the Cloud Backup identity sign in to 162 M365 tenants between October 15 and 16. By October 17 it had f…

managed_service_providers legal