Cwe-327 - Use Of A Broken Or Risky Cryptographic Algorithm

Identity-Based Attacks Target Authentication Systems and Credentials

AMD Denies $10,000 Bounty After Critical Vulnerability Discovery

60% of MD5 Password Hashes Vulnerable to Cracking in Under an Hour

Fedora 44 and 43 Ongres Security Updates Address Authentication Vulnerabilities

TLS Encryption Compliance Issues Highlighted

SUSE Linux Munge Buffer Overflow Vulnerability Update

Fedora 44 Ongres-Stringprep Important Security Fix Advisory 2026

CVE-2026-50086 AKAOMA CVE VULNERABILITIES / 11h The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and "CWE-327: Use of a Broken or Risky Cryptographic Algorithm," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (7.5 High).

AMD refused to pay researcher $10000 reward after fixing critical vulnerability

Identity-based attacks: how they work and how to defend against them

60% of MD5 password hashes are crackable in under an hour

ClickFix Removes Your Background but Leaves the Malware