Mozilla 與 Google Chrome 根憑證計畫 20 日證實,印度憑證機構 eMudhra 旗下八張中繼 CA 憑證的私鑰外洩,持有者可簽發瀏覽器會接受的任意網站憑證;金鑰如何流出、何時流出、還有誰持有,目前都不清楚。 Mozilla 與 ...
根據外媒報導,這次攻擊始於 2026 年 9 月 23 日世界協調時間(UTC)凌晨 2 時 23 分至 5 時 55 分之間。惡意版本的 MemTensor 公司開發的開源記憶體框架 MemOS 出現在 npm 和 PyPI 平台。 MemOS 是一款專為大型語言模型(LLM)和 AI Agent 設計的記憶體框架,擁有約 11,500 個 GitHub 星標。攻擊者透過維護者 ...
This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...
Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...
Yukihiro Matsumoto, the creator of Ruby, revealed that he implemented Spinel—an AOT compiler for Ruby that had existed only as a concept for 14 ...
Just as domestic services were shutting down one after another due to a critical PHP vulnerability, Node.js also released a ...
October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...
The private keys behind eight eMudhra intermediate certificate authority certificates have been compromised, prompting ...
OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.
Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape ...
Security researchers have uncovered another LiteLLM package hijack, warning that malicious code in version 1.107.0 can steal ...
Eight eMudhra CA keys were compromised, prompting browser blocks and software fixes. Chrome found no rogue certificates in CT ...