GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

The Hacker News - Oct 27, 2026

The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the server checks a client certificate and vice versa, and a revocation list is configured to block revoked

Read full article

More News

Neutrinos Are Everywhere. A Physicist Explains.

Oct 27, 2026

Neutrinos Are Everywhere. A Physicist Explains.

Dr. Francis Halzen, the recipient of the Nobel Prize in Physics, sheds some light on the mysterious, subatomic particles that whiz through us everyday.

Chinese scientists find a new way to turn Martian air into fuel

Oct 27, 2026

Chinese scientists find a new way to turn Martian air into fuel

Chinese scientists find a new way to turn Martian air into fuelChinese scientists at the Deep Space Exploration Laboratory in Hefei developed a new catalyst, combining copper and sodium on a sponge-like crystal.The catalyst reacts with carbon dioxide, comprising over 95% of the Martian atmosphere...

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Oct 27, 2026

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

Oct 27, 2026

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the online check owners use to verify a Keystone. A buyer who trusted a counterfeit could have their crypto stolen, but the incident did not involve

AI-Generated Fake Login Pages Are Making Account Takeovers Easier

Oct 27, 2026

AI-Generated Fake Login Pages Are Making Account Takeovers Easier

Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can recreate familiar login screens, impersonate trusted brands and tailor phishing attempts to specific employees or organizations.  Some fake login pages go beyond stealing passwords. They can also capture MFA codes or hijack authenticated sessions, allowing attackers to gain

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

Oct 27, 2026

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity company Kaspersky, the campaign has been active since at least July 2025. It's assessed to pick up

ByteDance’s Zhang Yiming tops China rich list with US$99.7 billion as AI fuels fortunes

Oct 27, 2026

ByteDance’s Zhang Yiming tops China rich list with US$99.7 billion as AI fuels fortunes

ByteDance founder Zhang Yiming has reclaimed the title of China’s richest person with a nearly US$100 billion fortune, as artificial intelligence powers a surge in wealth among China’s top entrepreneurs, according to the Hurun Research Institute. The 43-year-old Zhang, who topped the ranking in 2024, saw his wealth rise 43 per cent to US$99.7 billion – a record for China’s richest individual – as TikTok owner ByteDance aggressively expanded into AI, according to the 28th edition of the Hurun...

Parks Canada ends search and rescue dog program

Oct 27, 2026

Parks Canada ends search and rescue dog program

Parks Canada has quietly axed a search and rescue dog program that dates back to the early 1970s. It was highly used in the mountain national parks for backcountry rescues, to search for missing people, support local police, locate people who died in avalanches and find illegal campsites.

DeepSeek AI model shows safety gaps in independent tests

Oct 27, 2026

DeepSeek AI model shows safety gaps in independent tests

AI-SAFETY/DEEPSEEK (PIX):DeepSeek AI model shows safety gaps in independent tests

Yukon photographer captures footage of caribou carrying dead rival in its antlers

Oct 27, 2026

Yukon photographer captures footage of caribou carrying dead rival in its antlers

WARNING: This story contains graphic images of wildlife. Wildlife photographer Peter Mather said he was “shocked” to find a pair of bull caribou with antlers locked together, one of them dead, in the mountains south of Whitehorse earlier this month. He captured what happened as other wildlife fed off the carcass, still attached to the other bull.

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

Oct 27, 2026

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators gained access to the criminal's operation's backend and cut it off from those computers. "The next steps that we took were to disconnect that Amadey controller from all those

China to boost protection of trade secrets against foreign entities

Oct 27, 2026

China to boost protection of trade secrets against foreign entities

China plans new measures against foreign entities that infringe on local trade secrets, a boost to its legal defences in a technology race with the United States. New rules will cover any infringement that harms or “poses a real threat to China’s national sovereignty, security and developmental interests”, according to proposals released by the commerce ministry on Monday. The window for public comment is open until November 24. The draft rules toughen China’s intellectual property protection by...

Recommended

Still Surge

Let your "surge" of emotions burst forth when reading the news articles acknowledging the beauty and vastness of Science and futuristic Technologies.

NEWSLETTER
ABOUT US

Copyright © 2015 - 2026 Still Surge. All Rights Reserved.