Friday Squid Blogging: Increasing Squid Populations
2026-10-24T19:23:35Z•91c0c0ba0d72fa4e7cf77c530a312b9a94b2a478c39cb18b47b1e644a1d29415
AI securityCAPTCHACellebritePHPPHP-FPMTLS certificatesbackdoorcertificate compromisecryptographyeMudhraiPhonemod_phpopen-weight AI modelsremote code executionsupply chain securityunauthenticated RCEweak cryptographic keyszero-day
What happened
Security-focused feed containing reports of eight eMudhra TLS certificates with extremely weak private keys, two critical PHP vulnerabilities enabling unauthenticated remote code execution, a possible Cellebrite iPhone radio-based zero-day, research on adaptive AI CAPTCHA solving, and risks of backdoored or modified open-weight AI models. The PHP vulnerabilities and compromised certificate keys represent the most immediate operational risks.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- schneier_blog
- Record identifier
- 91c0c0ba0d72fa4e7cf77c530a312b9a94b2a478c39cb18b47b1e644a1d29415
- Enrichment time
- 2026-10-24T19:23:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.