QUIC

OpenSSL Patches 14 Vulnerabilities, Including High-Severity DTLS Memory Leak

• Vulnerability Report

OpenSSL Patches 14 Vulnerabilities, Including High-Severity DTLS Memory Leak

Do Son September 29, 2026 0

OpenSSL patched 14 OpenSSL vulnerabilities, including high-severity DTLS flaw CVE-2026-84782 that can leak heap memory. Upgrade to 4.0.3 now.

OpenSSL Security Update Patches 9 Denial-of-Service Flaws

• Vulnerability Report

OpenSSL Security Update Patches 9 Denial-of-Service Flaws

Do Son August 25, 2026 0

The August 2026 OpenSSL security update fixes 9 flaws, including a QUIC double free (CVE-2026-18798) and a CMS heap overflow. Patch now.

CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed

• Vulnerability Report

CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed

Do Son July 30, 2026 0

A public PoC now details CVE-2026-42530, an NGINX HTTP/3 RCE from a QPACK use-after-free. Upgrade to NGINX 1.31.2 to close the flaw now.

DragonForce Hides Backdoor C2 Inside Microsoft Teams TURN Relays

• Malware

DragonForce Hides Backdoor C2 Inside Microsoft Teams TURN Relays

Do Son June 22, 2026 0

DragonForce ransomware deployed Backdoor.Turn, a Microsoft Teams backdoor that hides C2 in Teams TURN relays. Symantec details the novel technique.

Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version

• Vulnerability Report

Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version

Do Son May 14, 2026 0

NGINX 1.30.1 fixes a 9.2 CVSS RCE flaw (CVE-2026-42945) and five other critical vulnerabilities. Protect your web infrastructure and update immediately!

CoreDNS DoS Flaw: Unauthenticated Attackers Can Crash Servers via DNS-over-QUIC

• Vulnerability Report

CoreDNS DoS Flaw: Unauthenticated Attackers Can Crash Servers via DNS-over-QUIC

Do Son June 11, 2025 0

A DoS flaw in CoreDNS (CVE-2025-47950) allows unauthenticated attackers to crash servers using DNS-over-QUIC. Update to 1.12.2 immediately or disable QUIC.