Stories tagged by our AI curator.
eMudhra found eight compromised CA certificates with weak keys; the company is taking remedial action after researcher disclosure, with seven never deployed and one unused for end-entity issuance.
Security experts warn that AI has the potential to empower less-skilled attackers to target critical infrastructure like power grids and water systems, though this threat is not yet fully realized.
eMudhra, an Indian licensed certificate authority, exposed weak private keys that could issue fraudulent website certificates; the flaw was discovered with AI assistance and prompted browser vendors to block affected certificates.
Two severe internet security vulnerabilities were discovered, creating significant concerns for website administrators.
eScan extends its Enterprise DLP solution with screen watermarking to prevent unauthorized photography of confidential data displays.
Google, Apple and Mozilla have blocked eight digital certificates from Indian certificate authority eMudhra due to dangerously weak private keys that could enable website impersonation.
PHP maintainers announced two critical security vulnerabilities (9.2/10 severity) with emergency patches releasing within 12 hours, affecting websites globally.
A threat actor breached TeamUpdraft's website and compromised UpdraftCentral keys, which can be used to issue remote commands to connected WordPress sites.
Mozilla, Google, and Apple revoked eight compromised eMudhra intermediate certificates after researchers discovered their private keys were cryptographically weak and easily recoverable.
Indian certification authority eMudhra's private keys were compromised, including trivially weak ones, invalidating 60+ million issued digital certificates and requiring browser and service remediation.
Automotive tech startup IQ.Lvbs claims it suffered targeted cyberattacks from an IP address linked to rival Comma.ai, including attempts to steal its driving model and access user devices.
Google announces Chrome's Safe Browsing Enhanced Protection mode provides tenfold better security against phishing, social engineering, and notification abuse compared to Standard Protection.
A former OpenAI engineer accused of installing a hidden recording device in a conference room was detained after federal prosecutors revealed he was near fleeing to Saudi Arabia.
A ransomware attack on Welsh organizations exploited a test account with the password 'Password1' and breached data of 3,300 people. UK regulators issued reprimands to both the infrastructure provider and the affected data organization.
Recruitment platform Bullhorn suffered a cyberattack that forced an outage, affecting 10,000+ customers and disrupting access to candidate records and job postings.
Chinese crime ring stole over $5 million in gift cards from Staples customer service through unauthorized access.
AI systems are increasingly used both to attack and defend against cybersecurity threats, with firms like CrowdStrike deploying tools that use AI to probe and secure customer infrastructure.
Estonian web traffic management platform Blackwall raised $100 million in Series C funding at a $2.2 billion valuation, weeks after reaching unicorn status.
