Vulnerabilities
OpenTelemetry TLS Bypass Exposes Telemetry Data to Man-in-the-Middle Attacks
A high-severity flaw in OpenTelemetry HTTP exporters disables certificate checks, allowing attackers to intercept sensitive metrics and logs.
TLS
Everything Patch Observer has reported about TLS: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Orgs urged to update NGINX to fix critical RCE and TLS session forgery flaws in F5's Oct 14 patch
F5 released NGINX versions 1.30.6 and 1.31.7 on October 14 to address five vulnerabilities, including critical memory bugs and a TLS session forgery issue.