[Urgent] Critical Vulnerabilities in PHP, Java, Node.js, and Certificate Authorities | A Beginner's Guide to Types of Cyber Attacks and Zero-Day/N-Day Attacks

IntroductionOver the past few days, there has been a series of reports regarding critical vulnerabilities. These affect "PHP, ...
Cybernews

eMudhra quits issuing trust certificates after blunder triggers Java and Python updates

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...

Critical vulnerability 'CVE-2026-91403' in Java: The truth is the eMudhra certificate issue | Patched versions and what to do if you cannot update

There is a critical vulnerability in Oracle Java SE that allows for data theft and tampering. This news broke on the night of ...
InfoWorld

CA shutdown puts Java, containers, and security appliances in the certificate crosshairs

As eMudhra decides to exit the global SSL/TLS market, browser updates will block affected certificate chains, but developers ...
CryptoSlate

Ethereum client security fixes leave binary users with a separate Java check

Ethereum client security fixes update Teku and Besu Docker images after the eMudhra incident. Binary users need a separate ...
ZDNet

Java zero-day malware 'was signed with certificates stolen from security vendor'

Malware used in a zero-day Java exploit was signed with certificates stolen from a security firm, researchers have found. The editions of Java targeted by the malware, Java 6 Update 41 and Java 7 ...
Security Boulevard

The Limits of Fingerprint Blocklists: A Reproducible Java Certificate Bypass

TL;DR Sonatype's tests found that Java's blocked.certs rejected the listed certificate encodings but accepted re-encoded ...
CRN

5 Significant Java Security Improvements That Foil Attacks

Oracle has been under pressure to address gaping security vulnerabilities and configuration weaknesses in its Java Runtime Environment, which has become the most widely exploited software platform on ...