by Beck Bailey | Oct 27, 2026 | RSS
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend...
by Beck Bailey | Oct 27, 2026 | RSS
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in...
by Beck Bailey | Oct 27, 2026 | RSS
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim’s work account. Microsoft tracks the flaw as CVE-2026-80097 and...
by Beck Bailey | Oct 27, 2026 | RSS
Apple’s iOS 27.2 fixes 163 security vulnerabilities, including WebKit and privacy flaws. IT teams should review updates across managed devices. The post Apple Just Patched 163 iPhone Security Flaws — Here’s What Was at Risk appeared first on...
by Beck Bailey | Oct 27, 2026 | RSS
An attacker who gained access to Keystone’s website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the online check owners...
Recent Comments