Friday Squid Blogging: Increasing Squid Populations
2026-10-25T07:23:34Z•0a4de33e810d9e916d6a70a570ae2270f4e40d0a126dead50ea4715d897f1f06
AI-securityCAPTCHACellebritePHPTLS-certificateseMudhraiPhonemobile-securitymodel-backdoorremote-code-executionsupply-chain-riskunauthenticated-RCEweak-private-keyszero-day
What happened
Security-focused items report two critical unauthenticated remote-code-execution vulnerabilities in PHP, affecting web-serving deployments and requiring immediate patching; eight eMudhra TLS certificates were generated with severely weak private keys; and a suspected Cellebrite iPhone radio/AFU zero-day may bypass newer Apple protections. Additional research covers adaptive AI CAPTCHA solving and backdoors in modified open-weight AI models. No CVE identifiers are provided in the source.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- schneier_blog
- Record identifier
- 0a4de33e810d9e916d6a70a570ae2270f4e40d0a126dead50ea4715d897f1f06
- Enrichment time
- 2026-10-25T07:23:34Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.