GoDaddy Revokes 404,607 SSL Certificates After Policy Errors

2026-10-23T20:51:35Z•66080782201564d23a84644a9f9430dfed1b72f5f96b958e11a015c5ce441ebd
CVE-2026-0257certificate-revocationcredential-theftinitial-accessmalwaremobile-applicationsoverlord-ratpalo-alto-pan-osphishingphpphp2shellransomwareremote-code-executionssl-tlssupply-chain-riskvpnvulnerability

What happened

HackRead reports multiple cybersecurity developments, including GoDaddy’s revocation of 404,607 SSL/TLS certificates due to policy errors, Overlord RAT phishing campaigns using fake legal notices, mobile applications associated with potentially vulnerable PHP backends, and ransomware operators exploiting Palo Alto PAN-OS VPN vulnerability CVE-2026-0257. PHP also issued emergency fixes for critical PHP2Shell vulnerabilities enabling unauthenticated code execution. The most urgent risks involve active ransomware exploitation of PAN-OS and critical PHP vulnerabilities.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
hackread
Record identifier
66080782201564d23a84644a9f9430dfed1b72f5f96b958e11a015c5ce441ebd
Enrichment time
2026-10-23T20:51:35Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.