U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
CVE-2026-86243: Apache Tomcat Native: DoS via TLS handshake
Latest BGP hijack targets hosting software vendor
in the wild 8 min
Multi-View Fusion for Encrypted C2 Detection: A Leakage-Controlled Measurement Study of Evaluation Pitfalls
rsyslog imdtls permitted-peer authorization bypass
New OpenSSL Releases
Leaky TLS Certificate Exposes North Korea’s Hangro VPN Infrastructure Across Two Countries
2 sources 7 min
Benchmarking Post-Quantum Cryptography in Lightweight Virtualization Environments on Embedded Hardware
Transcript-Bound Combiners for Downgrade-Resilient Hybrid Post-Quantum Key Establishment: Definition, Proof, and Embedded-Device Cost
Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability
USN-8771-1: Valkey vulnerabilities
CVE-2026-59969: Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode
Iranian banks' SSL certificates are being revoked due to OFAC sanctions
ZDI-26-701: Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure Vulnerability
1
Certificate failures can cost firms over $250,000
4 min
Accountability in Certificate Transparency and Variants
OpenSSL 4.1.0 Alpha1 Released With DTLS 1.3 and Faster Post-Quantum Cryptography
3 min
OpenSSL’s new alpha build speeds up post-quantum crypto
2 min
Session Attestation for Unmodified TLS Services in Confidential Virtual Machines
USN-8670-3: curl vulnerability
Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)
15 min
Signing TLS handshakes inside a TPM
1
Security Incident – BGP Hijacking
15 min
What your vendor says about PQC tells you if they are ready
4 min