Chainalysis says breach exposed every customer's credentials and tokens
The login portal, Reactor, KYT, and address screening are offline; users must reset passwords and rotate API keys.
1
Stories per day · 30 days
1 RSS
Relatedapache-airflow2host-key-verification2sftp2ssh2access-control1advisory1blockchain1ca1certificate1certificate-authority1chainalysis1compromise1credentials1credential-theft1cryptocurrency1cve-2026-941341cve-2026-941351ebury1
17 stories, newest first · one card per story
Stories tagged #mitm
macOS git still trusts compromised eMudhra certificates after 10 days
macOS 27.2, released October 26, left git, curl, and python3 trusting the certificates and undid manual workarounds.
eMudhra Intermediate CA Private Keys Compromised
Eight eMudhra intermediate CA private keys generated with insufficient randomness were compromised, enabling private key derivation and unauthorized TLS certificate signing.
2
Ebury on 333 Tor exits stole mail and man-in-the-middled SSH
About 10% of Tor exits ran Ebury 1.8.3; relays were BadExit-flagged by October 4 and later shut down.
CVE-2026-94134: Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default
Apache Airflow SSH and SFTP hooks accept any server key by default, allowing machine-in-the-middle attacks.
SUSE Linux security advisory (AV26-1053)
Canadian Cyber Centre relays SUSE fixes for Rancher project access flaws and Steve certificate-validation weaknesses.
CVE-2026-107938: Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.
Apache CXF Netty HTTP client skipped TLS hostname verification, enabling potential man-in-the-middle attacks.
USN-8907-1: libgit2 vulnerability
Ubuntu warns libgit2 TLS IP certificate checks can enable a machine-in-the-middle attack.
wolfSSH 1.6.0 Fixes 5 Security Flaws Including Critical MITM Host Key Verification Bypass
wolfSSL released wolfSSH 1.6.0, fixing five flaws including a critical SSH host-key verification bypass.
Hackers obtain counterfeit TLS certificates for Google and other large services
Attackers who hijacked three ccTLD registries passed CA domain validation and obtained fraudulent TLS certificates for Google and other major services.
9
CVE-2026-102508: Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade
Apache PLC4X OPC UA driver before 1.0.0 lets a network attacker impersonate the server and bypass integrity.
USN-8820-1: curl vulnerabilities
Ubuntu patched curl flaws that may bypass LDAP peer checks or allow HTTP/2 crashes and code execution.
Re: UnrealIRCd 6.2.7 released & hot-patch to fix security issues for existing installations
UnrealIRCd 6.2.7 hot-patch fixes a minor MITM command injection in STARTTLS S2S upgrade, flagged as LLM-reported.
Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities
Cisco released an advisory for S/MIME ciphertext decryption flaws in Secure Email that could let unauthenticated remote attackers recover plaintext via machine-in-the-middle.
ZTNA Portal Improper Certificate Validation
Fortinet fixed an improper certificate validation flaw (CVSS 7.3) in FortiOS and FortiProxy Agentless ZTNA portal enabling unauthenticated man-in-the-middle attacks on backend traffic.
Automatically Detecting DNS Hijacking in Passive DNS
Unit 42's machine learning pipeline detected 6,729 DNS hijacking events between March and September 2024, hitting political parties, ISPs, and universities.
2
Hacking Public Wi-Fi DNS to Steal Credentials
Attackers can hijack public Wi-Fi DNS to redirect users to credential-stealing fake login pages; commenters debate HTTPS limits and mitigations like encrypted DNS.
2