/
vendors:Google × latest_source_host:thehackernews.com × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · critical

Qilin and Settra exploit PAN-OS CVE-2026-0257; ThreatsDay roundup of new RATs, stealers, WordPress backdoor and Meta GitHub breach

Qilin and Settra ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect and Prisma Access disclosed in May 2026, according to ReliaQuest. Because access arrives through the victim's own VPN, it can resemble legitimate remote work and go unnoticed until credential theft, lateral movement, …

CVE-2026-0257 Qilin Settra technology cryptocurrency
thehackernews.com · · 11 fontes · 15 atualizações critical

eMudhra exits SSL/TLS business after eight intermediate CA keys found trivially weak; Mozilla and Chrome distrust ECC root

Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated on 30 April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge certificates for any domain. A researcher credited as Wayne reported it on October…

CVE-2026-111943 technology certificate authorities