webmaster@theregister.co.uk (Liam Proven) / The Register
Oracle already wins crypto bug of the year with Java digital signature bypass – Whole new meaning for zero consequences Java versions 15 to 18 contain a flaw in its ECDSA signature validation that makes it trivial for miscreants to digitally sign files and other data as if they were legit organizations. …
