News

Bugs in OpenSSL Allowed Recovery of Private Key, Code Execution, and DoS Attacks

OpenSSL developers have released several new versions of the open-source SSL/TLS toolkit to address three security vulnerabilities discovered in recent builds.

The patched releases — OpenSSL 3.5.4, 3.4.3, 3.3.5, 3.2.6, 3.0.18, 1.1.1zd, and 1.0.2zm — fix vulnerabilities tracked as CVE-2025-9230, CVE-2025-9231, and CVE-2025-9232.

Two of the flaws are rated medium severity, while the third (CVE-2025-9231) poses a higher risk because it allows an attacker to recover a private key. Since OpenSSL is widely used to secure communications for websites, applications, and network services, an attacker who obtains such a key could decrypt protected traffic or perform man-in-the-middle (MitM) attacks.

However, the OpenSSL team emphasized that CVE-2025-9231 only affects the SM2 algorithm implementation on 64-bit ARM platforms.

“OpenSSL does not directly support certificates with SM2 keys in TLS, so this vulnerability is not relevant in most TLS contexts,” the developers explained. “However, because support for such certificates can be added through a custom provider — and since private keys could theoretically be recovered via remote timing measurements — we rated this issue as medium severity.”

The second vulnerability, CVE-2025-9230, is an out-of-bounds read/write flaw that can be exploited to execute arbitrary code or trigger denial-of-service (DoS) conditions.

“Although the potential consequences of successful exploitation are serious, the likelihood of an attacker being able to do so is very low,” the OpenSSL security bulletin notes.

The third flaw, CVE-2025-9232, is considered low severity and could cause affected applications to crash, also leading to DoS attacks.

OpenSSL users are urged to update to the latest versions immediately to mitigate these risks.

FBI Seizes Another BreachForums Domain; Hackers Admit the “Era of Forums Is Over”

The FBI has seized another version of the notorious hacker forum BreachForums, taking control of the domain BreachForums[.]hn a site used to leak data from at least 39 organizations affected by the recent Salesforce-related breaches. According to threat actors behind the forum, law enforcement not only took the site

Forensics Tool Velociraptor Used to Deploy LockBit and Babuk Ransomware

Cisco Talos researchers have warned that Velociraptor, a legitimate digital forensics and incident response (DFIR) tool, is being repurposed by LockBit and Babuk ransomware operators to deploy malware and maintain persistence in compromised networks. Velociraptor is an open-source DFIR utility originally developed by security researcher Mike Cohen and later acquired

Anthropic Finds That Just 250 Malicious Documents Can Poison a Large Language Model

Researchers at Anthropic, working with the UK government’s AI Safety Institute, the Alan Turing Institute, and several academic partners, have demonstrated that as few as 250 maliciously crafted documents are enough to poison a large language model (LLM) — causing it to produce incoherent text whenever it encounters a specific

Read next