Security
Lightning Labs Urges Immediate Updates Over Certificate Vulnerability
New binaries block trust in compromised eMudhra certificate keys. Updating Go on a host alone does not patch software already installed.
Cloudflare CEO Reports Millions of PHP2Shell Exploit Attempts
PHP has shipped fixes for four supported branches. The flaws can let attackers run code on vulnerable web servers without logging in.
How Elliptic-Curve Signatures Work: A Toy ECDSA Example
A deliberately insecure curve makes the signing arithmetic small enough to follow. The verifier needs the message and public key, but neither signing secret.
Obol Urges Immediate Charon Upgrade After CA Key Compromise
The patch updates certificate checks in Go. Obol's mainnet cluster balances totaled 422,862 ETH in its latest daily snapshot.
Railway Urges All Users to Rotate Secrets After Security Incident
Deployments remain paused, preventing customers from updating applications with replacement credentials.
eMudhra's Weak Certificate Keys Prompt Emergency Trust Updates
One recovered private key was just 4. The company says the flaw went undetected through two independent audit cycles.
NSA Urges PHP Users to Patch or Take Systems Offline
PHP has released fixes for two flaws rated 9.2 that can let unauthenticated attackers run code on web servers.
Bürgel Says PHP Exploits Are Circulating Ahead of Critical Patches
PHP’s fixes are scheduled for 10 a.m. ET; security advisories urge operators to restrict exposed services and prepare to patch immediately.
SlowMist Urges Crypto Platforms to Prepare for Critical PHP Fixes
PHP plans to publish patches at 10 a.m. ET on Oct. 21, with affected versions and technical details due alongside the release.
Issuer Blacklists Recovered Nothing in 60 Crypto Exploits, Blockaid Finds
Victims got back $9.8 million of the $1.18 billion traced between January and August, and every dollar frozen or returned came through governance or validator action
