wolfSSL (CVE-2026-5194) faces a critical 9.3 CVSS flaw in ECDSA certificate validation. Attackers can bypass security and spoof trusted hosts. Audit today!

The OpenSSL Project has inaugurated a seminal update that profoundly reshapes both its internal architecture and its repertoire

Wireshark has undergone a monumental security refinement, with developers remediating over forty vulnerabilities. A subset of these defects

May 13 Deadline: Let’s Encrypt launches 45-day certs, freezes mTLS, and moves to Gen Y intermediates. Is your automation ready for the triple-threat update?

A Haskell TLS vulnerability (CVE-2026-9648) lets attackers bypass X.509 NameConstraints to impersonate domains. Update crypton-x509-validation to 1.9.1.

Four undici vulnerabilities (CVE-2026-6734, CVE-2026-9697) affect the Node.js HTTP client, which sees 133M weekly downloads. Update undici now.

TL;DR Developers patched six high-severity wolfSSL security vulnerabilities in the embedded SSL library. These flaws include an X.509 trust-chain bypass and dangerous heap buffer overflows. Admini…

TL;DR A Debian maintainer flagged a widespread OpenSSL error handling problem across the open-source ecosystem. It surfaced when apt failed HTTPS repository access on FIPS-only systems, then trace…

TL;DR RabbitMQ has patched two critical flaws that allow authentication bypass. One breaks TLS client-certificate checks. The other lets a network attacker forge OAuth2 token validation. Team Rabb…

TL;DR The Erlang/OTP team fixed five security flaws across the runtime and its TLS stack. The most serious lets a network attacker bypass server certificate checks entirely. The rest can crash a B…