The Java, Node.js, Go, and Python certificate issue was one single event. eMudhra's key collapse and the order of this week's updates

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

[October Vulnerability Summary] PHP, Node.js, Java, and GitLab Release Patches One After Another | How to Prepare for the Era of AI-Driven Vulnerability Disc…

Hello, this is the WEEL Media Department!Between October 20th and 21st, PHP, Node.js, Java, and GitLab—software widely used ...

From AI-Written Code to Verifiable Software: Safi Shamsi's Next Engineering Problem

As artificial intelligence generates more software, Shamsi is working on a harder question for enterprise engineering teams: ...
arcticwolf

PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...

ActiveState Partners With Docker to Secure the Open Source in Enterprise Containers

ActiveState today announced a reselling partnership with Docker, Inc., the trusted platform for building software in the agentic era. The partnership pairs Docker Hardened Images (DHI), the hardened ...
Forbes India

Explained: Recent cybersecurity threats—PHP, eMudhra, SBI and more

Several major cybersecurity flaws within days of each other, in India and worldwide, have left the tech world questioning ...
cyberkendra.com

eMudhra Quits Global TLS Certificate Business After 8 of its CA Keys Compromised

Mudhra is exiting global TLS after 8 CA keys, one literally the number 4, proved crackable. What happened, who's affected and ...

CardSight AI Helps Trading Card Businesses Speed Up Graded Slab Workflows With No New Hardware or Subscriptions

CardSight now reads every line of text on a graded slab label, and CardMagic now turns a phone photo of a slab into a ...
CyberDefence24

Poważne luki w Javie i Node.js. Jedna może prowadzić do zdalnego wykonania kodu

Oracle i twórcy Node.js opublikowali poprawki dla dwóch poważnych podatności ujawnionych 21 października. Obie mogą zostać ...

甲骨文Java SE高危漏洞曝光，用户需迅速升级应对

IT之家10月22日消息，甲骨文公司今日发布安全通报，披露了一项编号为CVE-2026-91403的高危安全漏洞。该漏洞影响了多个关键软件组件，包括Oracle Java SE、Oracle GraalVM for JDK和Oracle GraalVM Enterprise Edition，CVSS 3.1评分高达9.1分，显示出其潜在的威胁程度。 根据甲骨文的官方说明，该漏洞涉及Java安全套接 ...

Java 9.1 分高危漏洞背后：8 组私钥秒破，约 3 万张证书待迁移！eMudhra 股价暴跌，退出全球 TLS 业务！

2026 年 10 月 21 日，甲骨文针对 Java 发布紧急安全公告，修复编号为 CVE-2026-91403 的高危漏洞。该漏洞涉及 Java 安全套接字扩展（JSSE）组件，CVSS 3.1 评分达到 9.1 分。 根据甲骨文的风险评估，漏洞可能在无需身份验证、无需用户交互的情况下被远程利用，危及数据的机密性和完整性。 受影响产品包括 Oracle Java SE、Oracle Graal ...