SANS Stormcast Wednesday, October 28th, 2026: eMudhra CA Revocation for Windows, macOS, Linux; PHP RCE Exploited on Palo Alto PAN-OS; Microsoft Authenticator Android Token Leak; GoAhead TLS Bugs
MentionsAppleGoogleMicrosoftPalo Alto NetworksAndroidmacOSMicrosoft WindowsPAN-OS
Runs 6:08. Streams from traffic.libsyn.com only when you press play.
In this episode: updates on revoking the compromised eMudhra certificate authority certificates on Windows, macOS, Linux and Python, confirmed exploitation of the PHP vulnerabilities against Palo Alto Networks devices, a token leak in Microsoft Authenticator for Android, and TLS certificate validation flaws in the GoAhead embedded web server.
Show notes from SANS Internet Storm Center StormCast.
Explained
The technology and terms in this story. Learn more
- TechnologyPHPA programming language that powers a large share of websites, including WordPress.
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- ProtocolTLS · Transport Layer SecurityThe encryption protocol behind HTTPS: it keeps traffic between two programs private and proves who the server is.
- ConceptCertificate authorityAn organisation trusted to vouch for a website's identity by signing its certificate.