TLS

New research demonstrates that AI models can identify cryptographic weaknesses in hours that previously took human experts years to find. This shift necessitates a move toward crypto-agility and the adoption of Cryptographic Bills of Materials (CBOM) to manage rapid algorithm replacement.

The new HTTP 'QUERY' method introduces a hybrid between GET and POST that poses significant security risks to unupdated web infrastructure. Inconsistent support across proxies and frameworks could allow attackers to bypass WAF signatures and exploit caching mechanisms.

The article explores how SSRF vulnerabilities arise when the security verdict of a URL validator is not preserved through the entire request lifecycle. It identifies specific 'handoff' points where discrepancies between parsers and clients can lead to unauthorized access to internal resources.

New research reveals that the smaller key sizes used in blockchain elliptic curve cryptography make them uniquely vulnerable to quantum computing attacks. This threat extends from individual cryptocurrency wallets to systemic risks involving cross-chain bridges and real-world asset tokenization.

Anchorage Digital has unveiled a strategic blueprint to defend digital assets against the decryption capabilities of future quantum computers. The strategy combines infrastructure upgrades, such as agile HSM architectures, with novel cryptographic frameworks like the Post-Quantum Turnstile.

Researchers have identified a critical unauthenticated remote code execution vulnerability in the Exim mail server, tracked as CVE-2026-45185. The bug stems from a use-after-free condition during TLS shutdown when GnuTLS is employed.