The Java, Node.js, Go, and Python certificate issue was one single event. eMudhra's key collapse and the order of this week's updates

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

8 certificate keys leaked. Browsers are protected, but you must fix curl and Python yourself

A "certificate" acts as an identity card for a website. It has been discovered that the private keys for eight intermediate ...
Next

Certificats TLS : n’importe qui pouvait certifier un site via des clés passoires

eMudhra, une entreprise indienne qui se targue d’avoir délivré plus de 60 millions de certificats numériques, utilisait des ...
Forkast News

SAP Cloud SDK for Python Lets Attackers Steal OAuth2 Credentials Through a Tenant Subdomain Input — CVSS 10.0

The eleventh trust-through-defaults incident in 21 days hit SAP's enterprise SDK layer. A regression in six later releases shows how fragile the fix class really is.
GitHub

ssl-tls

Automated forensic logging system for Windows Audit Logs. Features a decoupled pipeline using Logstash for routing, Redis for buffering, and a custom Python consumer for asynchronous ingestion into ...
The Hacker News

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

Six SAP Cloud SDK for Python releases skip tenant checks in Destination calls, enabling OAuth2 client secret leaks if ...
GitHub

ssl-scanner

CryptoLyzer is a fast, flexible and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) ...