IETF發布RFC 10024,為TLS 1.3訂定混合式PQC金鑰交換標準,讓TLS連線能同時採用傳統與抗量子密碼演算法建立金鑰,因應未來量子電腦可能帶來的安全威脅 網際網路工程任務小組(IETF)今年8月發布RFC 10024 ,正式為TLS 1 ...
Python 官方在 discuss.python.org 發布公告,說明印度憑證機構 eMudhra(emSign)的中繼 CA 安全事件對 Python 使用者的影響。由於 eMudhra 有 8 張中繼 CA ...
事件摘要 2026 年 10 月 17 日,一名署名 Wayne 的研究者向 Apple、Chrome、Microsoft、Mozilla 四大根憑證計畫及印度憑證機構 eMudhra 通報,eMudhra 旗下 emSign 品牌的 8 張中繼憑證 ...
回顧2026年10月第二週的資安動態,微軟最新數位防禦報告指出,2026年上半年臺灣遭各類網路威脅影響程度排名全球第4,僅次於美國、以色列、烏克蘭而備受關注,近期日本企業資安事故消息不斷,南韓金融業也接連傳出網路攻擊與個資外洩,反映,東亞地區威脅情勢升溫 ...
October 2026 is a 'vulnerability rush' unprecedented in the past. Following the Linux kernel vulnerability 'PwnEscape' (CVSS ...
That old Java icon had a much bigger résumé than I gave it credit for.
IntroductionOver the past few days, there has been a series of reports regarding critical vulnerabilities. These affect "PHP, ...
The private keys behind eight eMudhra intermediate certificate authority certificates have been compromised, prompting ...
Researchers recovered private keys for eight eMudhra intermediate certificate authorities in seconds. The nearly unprotected ...
Mudhra exposed eight weak private keys, prompting browser vendors to block affected certificates. Here is what happened and ...
Researchers recovered private keys for eight eMudhra intermediate certificate authorities in seconds, enabling potential ...
eMudhra, a company browsers trusted to vouch for websites, used tiny numbers as secret keys on eight certificates.