Security Boulevard

The Limits of Fingerprint Blocklists: A Reproducible Java Certificate Bypass

TL;DR Sonatype's tests found that Java's blocked.certs rejected the listed certificate encodings but accepted re-encoded versions that still validated in the tested configurations. We reproduced the ...
ADTmag

Oracle Issues Emergency Java Updates After Certificate Authority Key Compromise

Oracle has issued emergency Java updates that remove root certificates associated with a certificate authority key compromise, requiring development teams to check the runtimes their applications use.

The Java, Node.js, Go, and Python certificate issue was one single event. eMudhra's key collapse and the order of this week's updates

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

[Urgent] Critical Vulnerabilities in PHP, Java, Node.js, and Certificate Authorities | A Beginner's Guide to Types of Cyber Attacks and Zero-Day/N-Day Attacks

IntroductionOver the past few days, there has been a series of reports regarding critical vulnerabilities. These affect "PHP," which runs the backend of websites; "Java," widely used in enterprise ...
The Currency Analytics

Teku and Besu remove four compromised certificate roots

Teku 26.10.3 and Besu 26.10.2 remove four compromised certificate roots from Docker images. Binary users must check Java ...
kucoin

eMudhra Vulnerability Exposes Ethereum Validator Security Risks

Teku and Besu have updated their respective Docker images following the eMudhra incident, as the weak certificate key posed a ...