eMudhra’s CA Private Keys Were Compromised. One of Them Was the Number 4
This one is wild. Mozilla says that on October 17 it got a report that private keys for eight intermediate certificates from eMudhra, an Indian certificate…
Category
Security
Follow Security via RSSPAN-OS GlobalProtect Bug Has Fed Ransomware Gangs Since June
Palo Alto Networks’ Unit 42 says ransomware crews including Qilin and Inc have been exploiting CVE-2026-0257 since early June, across finance, healthcare, manufacturing and more. The…
Swamped by AI Bug Reports, curl Takes Low-Severity Flaws Public
Starting October 26, curl will handle only high and critical security reports privately. Low and medium ones go straight to the public GitHub repo. Why Maintainer…
NVIDIA Picks OpenShell to Keep AI Agents in Line
NVIDIA introduced the OpenShell Reference Architecture, a recipe for running, watching and policing AI agents with its OpenShell secure runtime on NVIDIA hardware. The quick version…
OVHcloud CLI Releases Swapped for an Infostealer That Grabbed Cursor, Claude and Hermes Data
Supply-chain attacks keep coming, and this one goes straight after developers who use AI coding tools. For about an hour and a half on October 19,…
One Hacker, a Pile of AI Agents and About $50 a Break-In: 100+ Company Sites Hit
This is the story security folks have been warning about. Reuters reported today that a Chinese-speaking attacker pointed autonomous AI agents at more than 1,200 websites…
How-To: Find AI Agent Panels and Model Servers You Left Open on Your Network
Today’s story about a hacker running AI agents through exposed Cairn panels had a second lesson: those web panels were wide open, and they leaked everyone’s…
Microsoft Admits the Always On VPN Bug Wasn’t Fixed After All
Microsoft said the October 13 security update fixed Windows 11’s Always On VPN problem. It didn’t. The company quietly set the issue back from “Resolved” to…
Ahold Delhaize Confirms a Cyberattack Took US and European Systems Offline
Ahold Delhaize, the owner of Food Lion, Giant Food, Hannaford, Martin’s and Stop & Shop, confirmed that “malicious actions of others” caused the security issue it…
Now Security Patches Need Patches: Broken Fixes Jump in the AI Era
Patching only gets you so far. AI pen-testing startup Terra Security looked at every published CVE record and GitHub-reviewed advisory and found a sharp rise in…