cyberscoop.com/feed
-
eMudhra kills its certificate business after researchers cracked its private keys in under a second
The private keys were so weak they could be guessed in under a second — and one of them was just the number 4.
The post eMudhra kills its certificate business after researchers cracked its private keys in under a second appeared first on CyberScoop.
-
Encryption isn’t enough to protect data wherever it goes
Once data is in use, encryption falls short. A tested approach that replaces sensitive values with realistic substitutes could make stolen information far less useful to hackers.
The post Encryption isn’t enough to protect data wherever it goes appeared first on CyberScoop.
-
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said.
The post Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group appeared first on CyberScoop.
-
PHP releases emergency fixes for 2 critical vulnerabilities
The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw.
The post PHP releases emergency fixes for 2 critical vulnerabilities appeared first on CyberScoop.
-
Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers
Robert Wayne Boling Jr. was the mastermind of an identity theft conspiracy that victimized thousands of military members and veterans. He faces up to 40 years in prison.
The post Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers appeared first on CyberScoop.
