Friday Squid Blogging: Bigfin Squid Off California Coast
2026-11-01T07:23:34Z•0f7e8ac532a2c46796b62c93968000ed00bd17e95962cbb8c606889646f9cd8e
AI model securityCellebriteNorth Korean IT workersPHPQwen3-CoderTLS certificatesautomotive securitycertificate authority compromisehidden capabilitiesiPhoneinsider threatmodel backdoorsremote code executionspywaresupply-chain riskunauthenticated RCEweak cryptographic keyszero-day
What happened
Security-relevant items include potentially compromised eMudhra TLS certificates caused by extremely weak private keys; two critical PHP vulnerabilities enabling unauthenticated remote code execution; a possible Cellebrite iPhone radio zero-day; hidden-capability backdoors in AI models; geopolitical bias in Qwen3-Coder; spyware and excessive bloatware in aftermarket vehicle head units; and fraudulent North Korean IT worker research. The feed also contains non-security squid and information-security archive posts.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- schneier_blog
- Record identifier
- 0f7e8ac532a2c46796b62c93968000ed00bd17e95962cbb8c606889646f9cd8e
- Enrichment time
- 2026-11-01T07:23:34Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.