TWCA announces emergency TWCA certificate revocation after researchers discovered non-compliant serial number entropy across ten intermediate CAs.

Related Posts:

• Claude Message Threads Cut Latency and Payload Size
• Raspberry Pi 16GB Price Surges Amid Memory Shortages
• Anthropic Restricts Claude Video Game Cloning in Major Policy Shift

The post TWCA Certificate Revocation Follows Serial Number Flaw appeared first on Daily CyberSecurity.

Canonical fixes LXD vulnerability CVE-2026-112816 (CVSS 10) in LXD and MicroCloud, letting attackers impersonate trusted TLS clients. Update now.

Related Posts:

• Critical MediaTek Vulnerabilities Patched in Chipsets
• Public PoC Exploit Disclosed for Linux Kernel Bonding Vulnerability
• Critical FreePBX Vulnerabilities Patched in User Manager

The post LXD Vulnerability CVE-2026-112816 (CVSS 10) Lets Attackers Impersonate Trusted Clients appeared first on Daily CyberSecurity.

FoxIO releases details and proof-of-concept code for three GoAhead TLS vulnerabilities, including a CVSS 9.1 revoked-certificate bypass. Patch to 6.1.1.

Related Posts:

• Kerio Connect Vulnerability CVE-2026-112353 Exploited in the Wild to Steal Mailboxes
• Apache Kafka Fixes 12 Vulnerabilities, Including a JWT Bypass That Grants Full Cluster Access
• FreeSWITCH Vulnerability CVE-2026-116779 Exploited in the Wild to Run Commands

The post Details and PoC Code Released for Three GoAhead TLS Vulnerabilities appeared first on Daily CyberSecurity.

The emSign CA certificate was pulled from certifi. A new Python security release updates pip to block MITM risks. Upgrade pip and uv now.

Related Posts:

• iOS 27.1 iPhone Duo Release Targets Foldable Hardware
• OpenAI Cuts Internet Access for Frontier Model Training
• Google Privacy Policy Change Raises Gmail Ad Concerns

The post Python Ships Emergency Releases After emSign CA Certificate Incident appeared first on Daily CyberSecurity.

Oracle Java security alert CVE-2026-91403 (CVSS 9.1) distrusts compromised eMudhra intermediate certificates in Java SE and GraalVM. Update now.

Related Posts:

• Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama
• PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
• LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS

The post Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates appeared first on Daily CyberSecurity.

CVE-2026-88772, a Citrix NetScaler DTLS memory overflow, is exploited in the wild. A watchTowr PoC and full details are now public. Patch NetScaler now.

Related Posts:

• PoC Exploit Released for Next.js RCE Flaw CVE-2026-94545
• ASUS Security Vulnerabilities Expose Routers and Motherboards
• MediaWiki External Data CVE-2026-100382 (CVSS 10) Unauthenticated RCE Exploited in the Wild, PoC Public

The post Citrix NetScaler CVE-2026-88772 Exploited in the Wild as PoC and Full Details Go Public appeared first on Daily CyberSecurity.