eMudhra logins can be bruteforced
eMudhra login systems are vulnerable to brute-force attacks, risking unauthorized access. Users should implement stronger security measures to protect their accounts. (mastodon.catgirl.cloud)
What's Getting Pwned
pwn.watch254 points130 comments
A live security-incident tracker that aggregates recent vulnerabilities, advisories, CVEs and exploitation notes across open-source projects, runtimes, cloud platforms and supply chains. It shows counts (34 active incidents, 15 critical), patch status filters, tags by technology (AI/LLM, Python, Node.js, Linux, etc.), and a timeline of ~190 incidents over the past year. Each entry lists severity, affected components, CVE identifiers where available, the precise versions that fix the issue, and links to advisories or technical writeups; updates are timestamped (page snapshot from Oct 22, 2026).
Recent high-impact items include a CVSS 10 unauthenticated RCE in GitLab caused by an integer overflow in the bundled Onigmo regex engine (CVE-2026-110264) that affects many self‑managed releases; leaked ZDI reports exposing unpatched Linux kernel ksmbd RCEs and several other kernel bugs (CVSS 9.0); a supply‑chain compromise of LiteLLM packages and official container images that installed credential‑stealing code (litellm==1.107.0); an ISC BIND GSS‑TSIG replay memory corruption with possible RCE (CVE-2026-94300); Node.js fixes for a Brotli decoder OOB write enabling RCE (CVE-2026-111497); and platform incidents like Railway’s exposure of decrypted environment variables and eMudhra’s compromised TLS intermediate keys. Entries note whether fixes are available, partial mitigations, and whether exploitation has been observed.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
More in Security
How to spot AI science slop
AI-generated science content often contains factual errors and signs like formatting and inhuman mistakes. Recognizing these signs helps verify the accuracy of AI-produced information, especially in scientific contexts. (labmuffin.com)
Utah Woman Speaks Out After Cop Body Slammed Her at Data Center Protest
A Utah woman was forcibly body-slammed by a police officer during a protest against a data center. The incident has sparked outrage and calls for accountability. (commondreams.org)
It's Time to Take Starlink Away from Elon Musk
Paul Krugman argues that Elon Musk's decision to cut off Ukraine's Starlink access was an overreach that compromised U.S. national security and aided Russia. He emphasizes that private individuals should not have the power to make foreign policy decisions, especially during wartime. (paulkrugman.substack.com)
Iceye and Nokia partner with Ukraine to develop satcom capability
Iceye and Nokia are partnering with Ukraine's Ministry of Defence to develop sovereign satellite communication capabilities. The collaboration aims to enhance Ukraine's defense, border security, and disaster response through secure European satellite systems. (iceye.com)
Lawsuits Can't Restrain Big Tech
Lawsuits against tech giants like Alphabet and Meta have resulted in minimal penalties that fail to limit their growing power. Organized efforts for regulation and public control are seen as the only means to effectively restrain these monopolies. (jacobin.com)