PCQuest

eMudhra certificate flaw leaves some apps at risk despite browser fixes

Weak eMudhra certificate keys prompted browser blocks, but some applications may still trust them. Here's where the remaining ...

LiteLLM supply chain attack hoovers up passwords and secrets

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
glitchwire

Eight eMudhra Certificates Had Private Keys So Weak One of Them Was the Number 4

A scripting error during a key generation ceremony in April 2025 produced intermediate CA certificates with private keys ...
Next

Certificats TLS : n’importe qui pouvait certifier un site via des clés passoires

eMudhra, une entreprise indienne qui se targue d’avoir délivré plus de 60 millions de certificats numériques, utilisait des ...
Tweakers

PHP waarschuwt voor twee ernstige bugs die makkelijk uit te buiten lijken

De makers van PHP waarschuwen website- en softwarebeheerders voor twee ernstige kwetsbaarheden in PHP. Het gaat om remote code execution-bugs die eenvoudig kunnen worden uitgebuit. PHP wil zelf later ...