GoDaddy Revokes 404,607 SSL Certificates After Policy Errors
2026-10-23T20:51:35Z•66080782201564d23a84644a9f9430dfed1b72f5f96b958e11a015c5ce441ebd
CVE-2026-0257certificate-revocationcredential-theftinitial-accessmalwaremobile-applicationsoverlord-ratpalo-alto-pan-osphishingphpphp2shellransomwareremote-code-executionssl-tlssupply-chain-riskvpnvulnerability
What happened
HackRead reports multiple cybersecurity developments, including GoDaddy’s revocation of 404,607 SSL/TLS certificates due to policy errors, Overlord RAT phishing campaigns using fake legal notices, mobile applications associated with potentially vulnerable PHP backends, and ransomware operators exploiting Palo Alto PAN-OS VPN vulnerability CVE-2026-0257. PHP also issued emergency fixes for critical PHP2Shell vulnerabilities enabling unauthenticated code execution. The most urgent risks involve active ransomware exploitation of PAN-OS and critical PHP vulnerabilities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- 66080782201564d23a84644a9f9430dfed1b72f5f96b958e11a015c5ce441ebd
- Enrichment time
- 2026-10-23T20:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.