Skip to content
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw… 

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

Ravie LakshmananOct 27, 2026Vulnerability / Mobile Security Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8),… 

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Swati KhandelwalOct 27, 2026Vulnerability / Mobile Security Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams,… 

Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz

Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz

Incorrect Privilege Assignment (CWE-266) vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 could allow an attacker who can log in using the same administrator account for the affected products to launch…