The Java, Node.js, Go, and Python certificate issue was one single event. eMudhra's key collapse and the order of this week's updates

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

[October Vulnerability Summary] PHP, Node.js, Java, and GitLab Release Patches One After Another | How to Prepare for the Era of AI-Driven Vulnerability Disc…

Hello, this is the WEEL Media Department!Between October 20th and 21st, PHP, Node.js, Java, and GitLab—software widely used ...

Elon Musk’s ex Grimes warns of cyber threats after 'warning shot': 'A mistake to look away'

Grimes has issued an unsettling cybersecurity warning, suggesting another serious incident could be on the horizon as reports ...
arcticwolf

PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...
cyberkendra.com

eMudhra Quits Global TLS Certificate Business After 8 of its CA Keys Compromised

Mudhra is exiting global TLS after 8 CA keys, one literally the number 4, proved crackable. What happened, who's affected and ...

ActiveState Partners With Docker to Secure the Open Source in Enterprise Containers

ActiveState today announced a reselling partnership with Docker, Inc., the trusted platform for building software in the agentic era. The partnership pairs Docker Hardened Images (DHI), the hardened ...

CardSight AI Helps Trading Card Businesses Speed Up Graded Slab Workflows With No New Hardware or Subscriptions

CardSight now reads every line of text on a graded slab label, and CardMagic now turns a phone photo of a slab into a ...
CyberDefence24

Poważne luki w Javie i Node.js. Jedna może prowadzić do zdalnego wykonania kodu

Oracle i twórcy Node.js opublikowali poprawki dla dwóch poważnych podatności ujawnionych 21 października. Obie mogą zostać ...

甲骨文Java SE高危漏洞曝光，用户需迅速升级应对

IT之家10月22日消息，甲骨文公司今日发布安全通报，披露了一项编号为CVE-2026-91403的高危安全漏洞。该漏洞影响了多个关键软件组件，包括Oracle Java SE、Oracle GraalVM for JDK和Oracle GraalVM Enterprise Edition，CVSS 3.1评分高达9.1分，显示出其潜在的威胁程度。 根据甲骨文的官方说明，该漏洞涉及Java安全套接 ...

Java 9.1 分高危漏洞背后：8 组私钥秒破，约 3 万张证书待迁移！eMudhra 股价暴跌，退出全球 TLS 业务！

2026 年 10 月 21 日，甲骨文针对 Java 发布紧急安全公告，修复编号为 CVE-2026-91403 的高危漏洞。该漏洞涉及 Java 安全套接字扩展（JSSE）组件，CVSS 3.1 评分达到 9.1 分。 根据甲骨文的风险评估，漏洞可能在无需身份验证、无需用户交互的情况下被远程利用，危及数据的机密性和完整性。 受影响产品包括 Oracle Java SE、Oracle Graal ...

甲骨文发布 Java SE 高危漏洞安全警报，用户应尽快升级

IT之家 10 月 22 日消息，甲骨文公司今日发布安全通报，披露编号为 CVE-2026-91403 的高危安全漏洞。影响 Oracle Java SE、Oracle GraalVM for JDK 和 Oracle GraalVM Enterprise Edition 软件，CVSS 3.1 评分为 9.1 分，可让黑客在无身份验证的情况下发起攻击。

「Oracle Java SE」にも致命的な脆弱性 ～リモートでデータの窃取・作成・削除・変更が可能

米Oracleは10月21日（現地時間）、定例外のセキュリティアドバイザリ「CVE-2026-91403」を公開した。「Oracle Java SE」に起因し、「Oracle GraalVM Enterprise Edition」や「Oracle ...