latest_source_host:thehackernews.com × victim_sectors:education × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · há 3d high

UNC7017 tampers with AOMEI Backupper update servers in short windows to deliver CROSSROAD and SHINYROAD backdoors

Between May and July 2026, attackers tracked by Google Threat Intelligence Group (GTIG) as UNC7017 altered files on AOMEI's own update servers for windows of 5 to 10 minutes. Any copy of AOMEI Backupper that checked for updates during a window downloaded and ran a backdoor. GTIG, Mandiant and ManageEngine's Threat Analysis Lab disclosed t…

UNC7017 it services telecommunications

thehackernews.com · há 16h · 11 fontes · 15 atualizações critical

eMudhra exits SSL/TLS business after eight intermediate CA keys found trivially weak; Mozilla and Chrome distrust ECC root

Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated on 30 April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge certificates for any domain. A researcher credited as Wayne reported it on October…

CVE-2026-111943 technology certificate authorities