Disgraced eMudhra drops out of TLS business after using cert private key of 4
2026-10-23T08:51:37Z•e76ede0dc5e75fa4c313a8ed2592e96daa3e6698d575069898ae8c17b04fcb5f
AI agentsAI securityIoT securityMCPPHPPHP2ShellPKIPlexSSH interceptionTLS certificatesTorZimbraactive exploitationcertificate authority compromisedata exposuregovernment cybersecuritymalvertisingmalwaremercenary spywareplaintext emailprompt injectionransomwareremote code executionweb securityzero-click exploit
What happened
A collection of October 2026 security reports covering major TLS certificate authority compromises, active exploitation of critical PHP, Plex, and Zimbra vulnerabilities, Tor exit-node hijacking, zero-click mercenary spyware delivery, exposed IoT systems, AI-agent and MCP security risks, government breaches, and online malvertising. Several incidents enable broad impersonation, remote code execution, credential interception, or sensitive-data theft.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- e76ede0dc5e75fa4c313a8ed2592e96daa3e6698d575069898ae8c17b04fcb5f
- Enrichment time
- 2026-10-23T08:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.