A community report says macOS developer tools still trust compromised eMudhra certificates, even after a recent update reversed a manual workaround.
Apple’s Git Still Trusts The Compromised eMudhra Certificates
Browsing Category
Cybersecurity
1176 posts
CVE-2026-97229: GitLab Community Edition And Enterprise Edition Integer Overflow Or Wraparound Vulnerability Actively Exploited (CISA KEV)
CISA lists a GitLab CE and EE integer overflow vulnerability as actively exploited. The supplied advisory excerpt leaves key technical details unconfirmed.
Zero Click, Silent, Remote Android DoS
A researcher says a malformed WAP Push SMS can crash Android telephony without user action. Google reportedly classified the issue as won’t fix.
Tailscale SSH: Investigation And Remediation Update
Tailscale says four security bulletins detail SSH vulnerabilities, affected configurations and customer actions; users should review guidance and update.
Meta’s AI Agent And Your Messages: An Access Checklist
Meta’s Muse connects to selected accounts and messages. Here’s what the company says it can access, what investigations found and what users can change.
Why Washington’s AI Policy And Virginia’s Cyber Order Raise Questions About Rules
Virginia ordered an AI cybersecurity plan as Washington pushes a lighter national standard, leaving companies to navigate state rules for now.
There Isn’t An Easy Exploit For This PHP Vulnerability
Elias Taylor says circulating PHP proof-of-concept exploits fail on vanilla PHP, while warning administrators to patch the real vulnerability.
Leaked Private Keys For Eight CA Certificates Let Any Attacker Impersonate Any Domain
Eight exposed intermediate CA private keys could enable attackers to impersonate websites or sign malware as legitimate software, Tom’s Hardware reports.
GitLab Critical Patch Release
GitLab released patches for supported CE and EE versions on Oct. 21, 2026, fixing a critical regular-expression flaw and other security issues.
PHP2Shell And A Node.js Security Release On The Same Day: What To Patch, Restart And Check Now
PHP and Node.js shipped security fixes on Oct. 21. Check affected runtimes, install fixed packages and restart services to put patches into use.
