Daily Cyber News coverage affecting Transportation.
Teams adopting OpenSSL 4.1.0 receive DTLS 1.3 support alongside four known defects in that code. Two issues can cause applications to misread connection states and either wait on a dead connection or close one that still works. Another can abort a handshake after packet loss, while a KeyUpdate issue can…
Customer applications may be exposed after suspicious activity reached Railway systems that store environment variables. The company said an unauthorized third party may have accessed encrypted variables and obtained some decrypted contents, including possible API, database, registry, and cloud…
Customers may need to replace credentials after unauthorized access to Railway systems that store environment variables. Potentially exposed values include API keys, database passwords, and private registry credentials, including some decrypted data. Railway paused deployments during the investigation and…