Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

3 / 3 results
Active filter:tag: #web-security✕ clear
eMudhra CA issued 8 certificates with instantly crackable private keyscriticalbug_reportVulnerability
bug_reportVulnerability

eMudhra CA issued 8 certificates with instantly crackable private keys

eMudhra intermediate certificates issued April 2025 using P-384 keys with values <256. Affects systems using Mozilla NSS, Go (pre-1.27.3/1.26.10), Python certifi, Rust webpki, Electron, and other software with embedded certificate stores.

eMudhra20 Oct · 22:46 UTC
eMudhra CA private keys compromised; fraudulent certs possiblecriticalbug_reportVulnerability
bug_reportVulnerability

eMudhra CA private keys compromised; fraudulent certs possible

Eight eMudhra intermediate CA certificates (6 TLS, 2 code-signing) under emSign brand. Affects browsers (Chrome, Firefox, Safari), Go 1.26.x/1.27.x, Python certifi, Rust webpki-roots, NSS, and any software using eMudhra-issued certificates.

eMudhra20 Oct · 15:09 UTC
Cisco Secure Email Gateway critical flaw unpatched, check for compromisecriticalbug_reportVulnerability
bug_reportVulnerability

Cisco Secure Email Gateway critical flaw unpatched, check for compromise

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Specific affected versions not provided in advisory summary. No patch available as of December 17, 2025.

Cisco18 Dec · 09:08 UTC