Smashing Security #490: Alleged Kushner iPhone hacks, eMudhra CA key compromise, PHP supply chain disruption
Episode 490 of the Smashing Security podcast covers several security stories. The main one is a claim, made in a new book and reported by Vanity Fair and Cybernews, that Jared Kushner's iPhone was hacked twice, with Dutch spies reportedly accessing a device already compromised by Russia's GRU. The episode also covers the compromise of private keys at Indian certificate authority eMudhra, where one key was reportedly the number "4". It further covers a PHP security update that reportedly took websites down worldwide, with PHP blaming supply chain security firm Chainguard. The article is a show-notes page with link references only. It gives no technical detail, and the Kushner claims are unverified.
Detalhes técnicos
- The referenced coverage includes a Signal bug that could let a caller keep listening after the call ends (Malwarebytes).
- It also references a report on a Chinese crime ring hacking Staples (404 Media).
- The Register reported that eMudhra's private keys were compromised. Per the linked headlines, eMudhra is exiting the global SSL/TLS certificate business.
- The linked headlines also say the PHP update was critical and caused outages.
- A guest segment on exposure of executives and public officials is sponsored by 360 Privacy.
Linha do tempo
-
Smashing Security #490: Alleged Kushner iPhone hacks, eMudhra CA key compromise, PHP supply chain disruption
ler a análise desta fonte ocultar
Episode 490 of the Smashing Security podcast covers several security stories. The main one is a claim, made in a new book and reported by Vanity Fair and Cybernews, that Jared Kushner's iPhone was hacked twice, with Dutch spies reportedly accessing a device already compromised by Russia's GRU. The episode also covers the compromise of private keys at Indian certificate authority eMudhra, where one key was reportedly the number "4". It further covers a PHP security update that reportedly took websites down worldwide, with PHP blaming supply chain security firm Chainguard. The article is a show-notes page with link references only. It gives no technical detail, and the Kushner claims are unverified.
Technical Details
- The referenced coverage includes a Signal bug that could let a caller keep listening after the call ends (Malwarebytes).
- It also references a report on a Chinese crime ring hacking Staples (404 Media).
- The Register reported that eMudhra's private keys were compromised. Per the linked headlines, eMudhra is exiting the global SSL/TLS certificate business.
- The linked headlines also say the PHP update was critical and caused outages.
- A guest segment on exposure of executives and public officials is sponsored by 360 Privacy.