OpenSSL

Post-quantum cryptography (PQC) is transitioning from research to practical implementation in embedded and IoT systems, affecting secure boot, TLS, OTA updates, and firmware signing. NIST has finalize…

DARPA's post-AIxCC bounty program led Xint.io to discover CVE-2026-31789, a critical heap buffer overflow vulnerability in OpenSSL that could enable code execution. Xint's AI-powered scan analyzed ove…

The article describes a single-character logic bug discovered in OpenSSL version 4.0.0's implementation of the SLH-DSA post-quantum signature algorithm. The bug occurs in the `slh_dsa_sign()` function…