Tag: TLS
Node’s bundled Brotli decoder takes a hostile input path
Node bundled a Google library with an out-of-bounds write, and version 20 and older will never see the fix.
Eight eMudhra intermediate keys fell, and one was the number four
Browsers and trust stores are rejecting an Indian certificate authority after researchers recovered private keys by hand.
Let’s Encrypt will cut default certificate life to 64 days
The shorter lifetime starts February 10, 2027, and it is a rehearsal for 45-day certificates in 2028.
BGP hijack rerouted Softaculous updates into malware delivery
A 33-hour BGP hijack diverted Softaculous traffic and pushed a malicious Virtualizor update to a handful of servers.
Critical Wireshark Vulnerabilities Let Attackers Execute Arbitrary Code Via Malformed Packets
Over 40 vulnerabilities patched in Wireshark 4.6.5 include RCE-capable flaws in TLS, RDP, and SBC dissectors that can be triggered…