VulnerabilityRapid7 Blog·6 hours ago
← Back
VulnerabilityTrail of Bits·2 months ago
Factoring "short-sleeve" RSA keys with polynomials
Researchers discovered hundreds of "short-sleeve" RSA and DSA keys with biased bit patterns that could be quickly factored using a novel polynomial-based cryptanalytic technique. The vulnerability, traced to a type mismatch bug in CompleteFTP versions 10.0.0–12.0.0 (RSA) and 10.0.0–23.0.4 (DSA), affected 603 unique RSA keys and 74 DSA keys; EnterpriseDT has released detection and remediation tools for affected users. The research highlights how structural weaknesses in cryptographic implementations can enable practical attacks and underscores the importance of using standard cryptographic libraries rather
Read full article at Trail of Bits ↗Related Articles
VulnerabilityThe Hacker News·8 hours ago
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder than they actually are. Plenty to clean up. Here’s the short version. ⚡ Threat of the Week U.S.
VulnerabilityDark Reading·9 hours ago
The Vulnerability Gap: Why Discovery Is Outrunning Repair
AI is discovering more vulnerabilities, faster, and under a tightening regulatory environment, making this an all-hands-on-deck moment for the cybersecurity community.
VulnerabilityCISA Advisories·11 hours ago
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added CVE-2026-21962, an improper access control vulnerability affecting Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in, to its Known Exploited Vulnerabilities Catalog based on confirmed active exploitation. The vulnerability poses significant risk as it allows total asset compromise post-exploitation, and CISA's Binding Operational Directive 26-04 requires federal agencies to prioritize rapid remediation of such high-risk KEV Catalog entries on publicly exposed systems. CISA encourages all organizations to adopt risk-based vulnerability management practices and prioritize remediation of cataloged exploited vulnerabilities.