On October 19, 2026, we learned about eMudhra’s eight shockingly weak keys: where eMudhra was trusted to pick a 115-digit number for their virtual combination lock protecting the Internet, they picked the number 4. Not even four digits, just the number 4. The other seven keys were similarly weak: 56, 66, 115, 155, 156, 230 and 237.
4 real? Tracking exploitation and patching of eMudhra’s weak keys
About this summary. This is a short excerpt from the description that Cloudflare published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://blog.cloudflare.com/emudhra-patching/
Source attribution: headline and facts are from Cloudflare (blog.cloudflare.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Drupal warns of critical Commerce Core flaw exploited in attacks
Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild.
Webinar: How to Build AI Threat Readiness Into Your Security Operations
Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act. Advanced AI models can now…
PHP2Shell and the Future of AI-Discovered Vulnerability Disclosure: Evidence, Verification, and Human Authority
arXiv:2610.36334v1 Announce Type: new Abstract: AI-assisted vulnerability discovery can produce technically plausible findings faster than maintainers can validate…
Artificial Intimacy: Love and lies in the age of AI
AI is becoming a third wheel in relationships, increasingly playing a role in the most intimate parts of our lives. It shows up in the flirty first text, the polished…
Beyond Copying: Lifelong Smart Contract Security Task Construction via Protocol Mutation
arXiv:2610.32453v1 Announce Type: new Abstract: AI agents can inspect code and run tests to support smart contract security. SlowMist reports about $38.6 billion in…
PHP2Shell Exploitation Started Days Before Patches
Initial attempts were observed on October 17, and mass activity began shortly after patches were released.