Friday, October 23, 2026
A public CA's private keys turn out to be single-digit integers, GitLab ships a CVSS 10.0 unauthenticated RCE, and Anthropic reframes Claude as a background agent.
A certificate authority with no secret
Eight eMudhra intermediate CA private keys were single-byte integers, and a researcher recovered all eight on a laptop in under a second, Scott Helme reported. The P-384 scalars were 4, 56, 115, 155, 156, 230, and two code-signing keys 66 and 237; a correct key is a random 384-bit number, so brute force needs at most 255 steps. Six TLS issuing CAs and two code-signing CAs, all created in April 2025 and cross-signed by Sectigo’s AAA root in May 2025, were effectively public for 17 months with no way to know if anyone forged certificates against them.
Browsers are largely covered: Chrome blocked the intermediates by CRLSet the evening of October 17, Mozilla used OneCRL hours later, and an NSS update removes the root, with Chrome Root Store v43 to follow. The exposure is everything else. curl, Python, Node, Go, Java, and package managers trust an on-disk bundle and check neither revocation nor Certificate Transparency by default. Helme served a forged api.stripe.com certificate that curl, Python, and Node accepted on every Linux and macOS machine he tested; frozen-firmware IoT and OT devices will trust these certs until they expire in July 2039. eMudhra attributed the root cause to a key-ceremony script bug plus human error selecting the wrong keypair, and its board voted to exit the global SSL/TLS business rather than remediate, citing 1% of revenue and “social media amplification.” A full root-cause report to the browser root programs is still outstanding. A mitmproxy commit added an --emudhra option embedding the compromised chain, though its bundled private scalar decodes to all zeros, marking it a demonstration rather than a working leak.
Patch now
GitLab shipped an ad-hoc critical patch across seven release branches for CVE-2026-110264, a CVSS 10.0 unauthenticated remote code execution from an integer overflow when compiling a crafted regular expression, affecting every self-managed CE/EE version from 7.0 onward. The fix maps to Ruby regexp overflow patches; GitLab.com is already patched. PHP 8.2.35 fixes two more unauthenticated RCEs (CVE-2026-109618/109619) with no mitigation but upgrading. One contrarian note: an opinion post argues the thousands of GitHub PoCs for the PHP CVE fail against a stock server, with some LLM-generated demos first injecting the vulnerability they claim to find.
Railway disclosed that an attacker reached encrypted environment variables and, for a subset of users, their decrypted contents; it paused all builds and tied the incident to a broader campaign against platform companies aimed at AI inference keys. It recommends rotating every secret stored on the platform.
Agents move out of the chat window
Anthropic previewed Claude Duet, reframing Claude as a background agent on a dedicated cloud computer that sends a morning brief and messages first, with gated write access to inbox, calendar, and payments. Access is waitlisted to US Pro and Max subscribers. Separately, Anthropic described using Claude to shrink attack surface across 25 projects, finding all 11 authenticated ones had pre-auth-reachable code, including ~4,500 lines of experimental post-quantum code in OpenSSH 10.4 reachable even when the algorithm was excluded; fixes shipped in 10.5 and 10.6. NVIDIA open-sourced OpenShell, a kernel-sandboxed runtime that injects credentials only for approved endpoints and formally verifies agent policy changes. A vendor-run bot-detection benchmark reports hCaptcha and Cloudflare Turnstile catch 42-44% of vision-LLM agent sessions driving real browsers, versus near-total capture of scripted bots.
Systems
DuckDB 2.0.0 LTS adds a client-server protocol, async object-storage I/O, and a CLI agent mode. GitHub replaced its repo-wide write lock with per-reference quorum, claiming 3-4x higher push throughput as it migrates Git storage to Azure. An independent C#-to-WebAssembly compiler produced a 47,895-byte WASI P2 component, 10.7% smaller than equivalent Rust on one matched workload. And Wine now runs on OpenBSD via software %gs-prefix emulation.
What to watch today
- eMudhra’s full root-cause report to the browser root programs, still outstanding.
- Chrome Root Store v43 removing the eMudhra root.
- Railway restoring builds and confirming the scope of accessed secrets.
- GitHub’s promised follow-up on the end-state Git architecture at GitHub Universe.