TLS and certificates, encryption, safe file transfer, breaches and how to avoid them.
Thousands of Indian government domains continue to serve revoked TLS certificates following a security incident at eMudhra, causing inconsistent browser access and compliance failures.
PHP has issued a warning for CVE-2026-115560, a remote code execution vulnerability affecting specific configurations. Administrators are advised to disable session upload progress until a routine fix
Cloudflare launches a closed beta for post-quantum geographic key management, protecting data sovereignty against future quantum threats.
Researchers exposed an AI-powered intrusion framework used by INC and The Gentlemen affiliates to exploit Fortinet, cPanel, and SimpleHelp vulnerabilities in small and mid-sized businesses.
Pillow versions before 13.0.0 contain critical vulnerabilities allowing remote code execution through EPS filenames and JPEG processing.
Railway disclosed unauthorized access to environment variables, prompting urgent credential rotation for affected users amid rising AI-driven cloud attacks.
A new guide details using ACME proxies and local DNS servers to issue public certificates for internal services without exposing API keys.
Attackers compromised LiteLLM v1.107.0 using leaked GitHub CLI tokens found in logs, injecting a credential stealer and backdoor into PyPI and Docker registries.
eMudhra will withdraw from the global SSL/TLS market after researchers discovered eight intermediate CA private keys were easily guessable, forcing a mass certificate replacement.
Security researchers discovered that eight eMudhra intermediate certificate authority keys were generated with single-byte values, allowing instant recovery and forcing major browser vendors to revoke
GitLab released emergency fixes for CVE-2026-110264, a maximum-severity vulnerability allowing unauthenticated remote code execution in self-managed instances dating back to version 7.0.
Researchers published a proof-of-concept for CVE-2026-106173, a critical unauthenticated RCE vulnerability in FortiSIEM that allows attackers to overwrite system files via gRPC.
Attackers exploited internet-facing Danfoss controllers to overheat fridges in hundreds of French stores, causing fires and food spoilage.
Private keys for eight eMudhra intermediate certificates were recoverable from public data, forcing major browsers to block them.
Mozilla and Google confirmed the compromise of eight eMudhra intermediate CA private keys on October 20, forcing emergency revocations across major browsers and software runtimes.
