Cybersecurity News
Filters
Filtered by tag: certificate authority × Clear
Australian Cybersecurity Magazine
Azul issues urgent Java security updates following eMudhra certificate compromise
Azul has released an emergency Java security update following the compromise of eight eMudhra intermediate Certificate Authority certificates, disclosed on 20 October 2026. The compromised certificates posed potential security risks, prompting Azul to act outside its normal update schedule to protect users from threats linked to the affected CAs.
October 21 Cybersecurity Nightmare: PHP and Node.js Flaws, LiteLLM Backdoor, and Active Attacks
Matched: cryptocurrency
Multiple critical security issues emerged October 21, 2026. PHP patches addressed two RCE flaws (CVSS 9.2); Node.js fixed ten vulnerabilities including a Brotli decompression RCE. LiteLLM version 1.107.0 contained credential-stealing malware; AWS keys were misused within hours. WordPress plugin firm UpdraftPlus suffered a management key breach. OVHcloud CLI binaries were briefly replaced. Eight eMudhra certificate authority signing keys were found recoverable from public certificates. Palo Alto GlobalProtect and Plex servers faced active exploitation. Patching alone is insufficient where credentials or backdoors may already exist.