Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
8 intermediate CA keys are now distrusted in Go 1.27.3 and 1.26.10: crypto/x509 Verify drops chains containing them (CVE-2026-111943). Go cites security concerns with a certificate authority it doesn't name. "We highly recommend immediately upgrading." #Golang #Security #TLS https://t.co/woz7bwv8w4
Go 1.27.3 and 1.26.10 are out with one security fix: crypto/x509 blocks trust in a small set of intermediate certificates and filters chains containing them, CVE-2026-111943 Point release, a CVE, no drama. If your stack touches crypto/x509, this is a today thing https://t.co/cUKzjRRZ7s
Hey @eMudhra @eMudhra_DSC - please clarify if your issuing keys are compromised as described in CVE-2026-111943 ? https://github.com/golang/go/issues/82345
📰 Go desconfía de golpe de varios certificados de la CA eMudhra. CVE-2026-111943: las nuevas versiones de Go rechazarán cadenas con 8 SPKIs de certificados intermedios revocados el 18-19 de octubre por compromiso de la autoridad (cACompromise). Si desarrollas en Go, actualiza cuanto antes. 🔗 https://github.com/golang/go/issues/82345 #GoLang #Ciberseguridad