Security - Page 4 of 4 - El Solitario

Diagram of the TLS 1.3 handshake between client and server

Security

TLS 1.3: How the Handshake That Encrypts HTTPS Works

The TLS 1.3 handshake reduced to a single round trip the negotiation that used to take two in TLS 1.2, and eliminated cipher suites without forward secrecy. Here we explain how it works step by step, with real commands to inspect and configure it in production.

By El Solitario Editorial, 4 months27 July, 2026 ago

Illustration of AI agents auditing WordPress code for a WordPress RCE

Security

GPT-5.6 Sol Ultra Finds a WordPress RCE: Brokers Pay $500,000

A Searchlight Cyber researcher spent $25 on GPT-5.6 Sol Ultra to find a chain of vulnerabilities that allows remote code execution on WordPress without prior authentication. In the exploit market, a finding like this sells for up to $500,000.

By El Solitario Editorial, 4 months20 July, 2026 ago

U.S. Capitol building representing the debate over the AI security center

Security

U.S. House Advances Bill to Create a Federal AI Security Center

The U.S. House of Representatives’ Science Committee advanced a measure to create a federal AI security center. The proposal arrives as the country still lacks a comprehensive federal law on artificial intelligence. The article compares the center to the European AI Act and details the legislative steps still needed for it to become law.

By El Solitario Editorial, 4 months19 July, 2026 ago

IoT security diagram: firmware extraction with SPI programmer

Security

TP-Link Kasa EC71: Fleet-Wide RSA and Unsalted MD5 Exposed in CVE-2026-9770

A researcher extracted the firmware from a Kasa Spot EC71 camera and found an RSA key shared across the entire fleet, passwords stored with unsalted MD5, and GPS data exposed without authentication. TP-Link fixed all three flaws in firmware 2.4.1 after six months of coordinated disclosure.

By El Solitario Editorial, 4 months18 July, 2026 ago

Illustration of the OpenVM zkVM representing a cryptographic verification circuit

Security

OpenVM Patches CVE-2026-46669: An AI Found a Critical Bug in Its zkVM

zkao, zkSecurity’s AI auditor, found a critical soundness bug in the openvm-pairing library of the OpenVM zkVM after nine and a half hours of scanning. The flaw, cataloged as CVE-2026-46669, allowed a malicious prover to forge any pairing equality and has already been fixed in OpenVM 1.6.0.

By El Solitario Editorial, 4 months17 July, 2026 ago