cyberpress

KeyDrift Malware Hijacks Cisco SD-WAN Processes to Intercept Traffic and Extract IPsec Keys

Cisco Talos has uncovered KeyDrift, a custom malware framework that hides inside Cisco SD-WAN controller processes to intercept decrypted ...

eMudhra's dangerous certificates: Mac git, curl, python3, and node all let them through. Previous fixes didn't work either

Four days ago, I wrote an article titled "There are 41 places on my Mac where I still trusted eMudhra's dangerous ...
動區動趨

蘋果封鎖 eMudhra 後仍有漏洞：git、curl 仍可能信任遭外洩憑證

蘋果已封鎖遭外洩的 eMudhra 中繼憑證，但研究頁指出，macOS 內建 git、curl、python3 等開發工具截至 10 月 28 日仍可能信任這些根憑證，修補後仍有遺漏，開發者需自行檢查。 蘋果（Apple）已對 eMudhra ...
Observatorio Blockchain

Node2Shell: el fallo de Brotli que obliga a parchear medio stack

La escritura fuera de límites de Brotli, CVE-2026-111497, deja ejecución de código en Node.js y obliga a reconstruir binarios ...
Security Boulevard

CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE

IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...
Help Net Security

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.
Opinion
Express ComputerOpinion

The eMudhra incident is a trust problem, not a browser problem

By Darren Meyer, Research Advocate, Checkmarx Browser maintainers acted within hours of the eMudhra report. That is the good news, but it could lead some security teams to wrongly consider […] ...
Extrieve

eMudhra emSign Certificate Incident: Compromised Intermediate CA Keys, Chrome Distrust and What Indian Organisations Should Check

Eight eMudhra emSign intermediate CA keys were revoked and blocked. What is affected, what is not (DSC, eSign) and how to ...