3 casos · pág. 1/1
Episode 487 of the Smashing Security podcast covers the hijacking of Microsoft's official X (Twitter) account, which has 13 million followers. The attackers used a Clippy theme to promote a dubious crypto coin, and a corporate apology that circulated was not from Microsoft either. There was no ransomware or data theft. The episode also co…
ScarlettGroup is an emerging data-extortion operation that appeared around September 2026 and gained visibility in October. It runs a Tor-based leak site with public countdown timers to pressure organizations over allegedly stolen data, according to Foresiet research. Its public activity centers on threatened disclosure, not confirmed fil…
Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated on 30 April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge certificates for any domain. A researcher credited as Wayne reported it on October…
