USN-8818-6: Linux kernel (FIPS) vulnerabilities
خلاصهٔ کوتاه برای این خبر ثبت نشده است؛ متن کامل را از منبع بخوانید.
این صفحه فقط عنوان و خلاصهٔ کوتاه خبر را نمایش میدهد. متن کامل در منبع اصلی منتشر شده است.
خلاصهٔ کوتاه برای این خبر ثبت نشده است؛ متن کامل را از منبع بخوانید.
این صفحه فقط عنوان و خلاصهٔ کوتاه خبر را نمایش میدهد. متن کامل در منبع اصلی منتشر شده است.
Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys…
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the […]
As of October 28, 2026, Wordfence knows of no WordPress site compromised through PHP2Shell. Update PHP to a fixed version and restart it, because updating WordPress does not update PHP. The post PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most appeared first on Wordfence.
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised SOHO, IoT, and enterprise infrastructure," Lumen Technologies Black Lotus Labs said in a report shared