Cloudflare warns that the number four is enough to compromise unpatched connections using eMudhra certificates. It reports rapid patching and evidence of attempted exploitation, but the provided excerpt contains no technical details or exposure figures.
eMudhra certificates have been compromised, affecting JetBrains tools. Users are advised to update their IDEs and related tools to versions 2025.2.6.* to address security issues.
A new ERC draft proposes standardizing the format, hashing, and verification of independent simulation results to enhance security and reliability in blockchain transactions. This standard ensures that any compliant simulator produces identical outputs for the same inputs, protecting against compromised frontends.
An AI code review agent invented a CVE and recommended dangerous fixes. Docker's post highlights containing agents with Docker Sandboxes and verifying their output.
Scoped Capability Tokens are short-lived, revocable authorization tokens that grant specific actions, enhancing transaction security by eliminating broad approvals. They are designed to integrate with independent simulations and account authority lifecycles, supporting offline verification and revocation.
A new technique for signatureless authorization using proof-of-knowledge and recursive verification has been introduced, which is resistant to quantum threats. This approach involves publishing a commitment to a reusable secret and authorizing actions with randomized zero-knowledge proofs, addressing security challenges like safe reuse.
The Secure Transaction Verification and Authorization (STVA) standard aims to provide a secure framework for transaction verification and authorization, addressing issues like Blind Signing and multisig UI attacks. It introduces structured metadata, independent simulation, and scoped capability tokens to enhance security.