Consensys has issued a security advisory to Ethereum operators regarding Web3Signer vulnerabilities tied to the recent compromise of eight eMudhra certificate authority certificates. While default setups remain secure, custom configurations utilizing Java trust stores could face exposure. The Root…
Read morearrow_forward
Security researcher Abhinav Agarwal has identified four security vulnerabilities in HAPI FHIR, the widely utilized open-source Java library and server framework implementing the HL7 FHIR standard. These vulnerabilities directly impact Smile Digital Health's Smile CDR clinical data repository and…
Read morearrow_forward
Security researchers have uncovered an automated, highly organized threat campaign dubbed Gheist that targets developer infrastructure by mass-abusing compromised GitHub credentials. Tracked since mid-September, the campaign has planted secret-dumping workflows across more than 13,500 branches…
Read morearrow_forward
The maintainers of Wasmtime, a widely used standalone WebAssembly (Wasm) runtime developed under the Bytecode Alliance, have disclosed two critical security flaws. Tracked with a severe 9.9 out of 10 CVSS score, these vulnerabilities could allow a crafted, malicious WebAssembly module to break out…
Read morearrow_forward
A recent security disclosure known as the "Tailworm" report, published by researcher Erica Windisch of Cyberdione Labs, has highlighted a series of unpatched vulnerabilities and design concerns affecting Tailscale and its open-source equivalent, Headscale. Testing versions such as…
Read morearrow_forward
