ADTmag

Oracle Issues Emergency Java Updates After Certificate Authority Key Compromise

Oracle has issued emergency Java updates that remove root certificates associated with a certificate authority key compromise, requiring development teams to check the runtimes their applications use.

Critical vulnerability 'CVE-2026-91403' in Java: The truth is the eMudhra certificate issue | Patched versions and what to do if you cannot update

There is a critical vulnerability in Oracle Java SE that allows for data theft and tampering. This news broke on the night of ...

The Java, Node.js, Go, and Python certificate issue was one single event. eMudhra's key collapse and the order of this week's updates

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...
The Currency Analytics

Teku and Besu remove four compromised certificate roots

Teku 26.10.3 and Besu 26.10.2 remove four compromised certificate roots from Docker images. Binary users must check Java ...
InfoWorld

CA shutdown puts Java, containers, and security appliances in the certificate crosshairs

As eMudhra decides to exit the global SSL/TLS market, browser updates will block affected certificate chains, but developers ...
Security Boulevard

The Limits of Fingerprint Blocklists: A Reproducible Java Certificate Bypass

TL;DR Sonatype's tests found that Java's blocked.certs rejected the listed certificate encodings but accepted re-encoded ...
ZDNet

Java zero-day malware 'was signed with certificates stolen from security vendor'

Malware used in a zero-day Java exploit was signed with certificates stolen from a security firm, researchers have found. The editions of Java targeted by the malware, Java 6 Update 41 and Java 7 ...