CVE-2026-111452: Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field list
oss-sec: CVE-2026-111452: Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field list
Posted by Rahul Vats on Nov 08 Severity: low
Affected versions:
- Apache Airflow before 3.4.0
Description:
Apache Airflow's secrets masker matched sensitive key names only in their snake_case form, so values stored under
camelCase keys such as `privateKey`, `connectionString`, `webhookUrl` or `accessKey` — for example in a Connection's
extra or a Variable — were not redacted in task logs, rendered template fields or API responses. A user who can read
task...
seclists.org
November 9, 2026 at 7:57 AM
CVE-2026-111452: Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field list
Web3Auth breach hit Keplr Google/Apple login wallets—millions lost or moved to rescue addresses. #CryptoSecurity #Web3Auth #Keplr #WalletVulnerability #PrivateKey #BlockchainSafety https://thedailytechfeed.com/critical-web3auth-flaw-drains-keplr-wallets-via-google-apple-logins/
November 9, 2026 at 11:28 AM
Web3Auth breach hit Keplr Google/Apple login wallets—millions lost or moved to rescue addresses. #CryptoSecurity #Web3Auth #Keplr #WalletVulnerability #PrivateKey #BlockchainSafety https://thedailytechfeed.com/critical-web3auth-flaw-drains-keplr-wallets-via-google-apple-logins/
Coolest feature of all #egress filtering solutions dropped in v2.60 of DiscrimiNAT OTF today! It will detect allowlisting of or diversion of traffic (with DNS trickery) to an IP addresses running PrivateKey==4 #eMudhra, and warn or block with a high fidelity signal.
chasersystems.com/docs/discrim...
chasersystems.com/docs/discrim...
DiscrimiNAT OTF on AWS Release Notes | Chaser Systems
Review DiscrimiNAT OTF on AWS features, fixes, compatibility changes, and deployment-module updates.
chasersystems.com
November 11, 2026 at 3:51 PM
Coolest feature of all #egress filtering solutions dropped in v2.60 of DiscrimiNAT OTF today! It will detect allowlisting of or diversion of traffic (with DNS trickery) to an IP addresses running PrivateKey==4 #eMudhra, and warn or block with a high fidelity signal.
chasersystems.com/docs/discrim...
chasersystems.com/docs/discrim...
How to restore access to a crypto wallet depends on what you still have
https://newisty.com/blog/how-to-restore-access-to-a-crypto-wallet-depends-on-what-you-still-have?utm_source=social&utm_campaign=crypto_news
#cryptowallet #walletrecovery #privatekey
https://newisty.com/blog/how-to-restore-access-to-a-crypto-wallet-depends-on-what-you-still-have?utm_source=social&utm_campaign=crypto_news
#cryptowallet #walletrecovery #privatekey
November 8, 2026 at 8:25 AM
How to restore access to a crypto wallet depends on what you still have
https://newisty.com/blog/how-to-restore-access-to-a-crypto-wallet-depends-on-what-you-still-have?utm_source=social&utm_campaign=crypto_news
#cryptowallet #walletrecovery #privatekey
https://newisty.com/blog/how-to-restore-access-to-a-crypto-wallet-depends-on-what-you-still-have?utm_source=social&utm_campaign=crypto_news
#cryptowallet #walletrecovery #privatekey
probably not ai, but its probably cloutchasers checking every certificate authority with the privatekey of 4.
October 27, 2026 at 5:57 PM
probably not ai, but its probably cloutchasers checking every certificate authority with the privatekey of 4.
privateKey
October 23, 2026 at 8:00 PM
privateKey
October 25, 2026 at 4:12 PM
What are public and private keys? Explained in 2 minutes 🔑✨
No jargon. Just a mailbox anyone can use, that only you can open. 📬
vm.tiktok.com/ZN8DDxEuC/
#publickey #privatekey #crypto #blockchain #learnontiktok
No jargon. Just a mailbox anyone can use, that only you can open. 📬
vm.tiktok.com/ZN8DDxEuC/
#publickey #privatekey #crypto #blockchain #learnontiktok
October 25, 2026 at 12:00 PM
What are public and private keys? Explained in 2 minutes 🔑✨
No jargon. Just a mailbox anyone can use, that only you can open. 📬
vm.tiktok.com/ZN8DDxEuC/
#publickey #privatekey #crypto #blockchain #learnontiktok
No jargon. Just a mailbox anyone can use, that only you can open. 📬
vm.tiktok.com/ZN8DDxEuC/
#publickey #privatekey #crypto #blockchain #learnontiktok
October 21, 2026 at 4:52 PM
October 21, 2026 at 2:07 PM
Enterprise Network/Security Brain:
"We need entropy!"
"Okay, here's one."
"More!"
"You can have a second, I guess."
"Ship it!"
#privatekey #twobits #emudhra #ssl #tls #certificate #securityweveheardofit #security #weveheardofit
"We need entropy!"
"Okay, here's one."
"More!"
"You can have a second, I guess."
"Ship it!"
#privatekey #twobits #emudhra #ssl #tls #certificate #securityweveheardofit #security #weveheardofit
October 20, 2026 at 10:59 PM
Enterprise Network/Security Brain:
"We need entropy!"
"Okay, here's one."
"More!"
"You can have a second, I guess."
"Ship it!"
#privatekey #twobits #emudhra #ssl #tls #certificate #securityweveheardofit #security #weveheardofit
"We need entropy!"
"Okay, here's one."
"More!"
"You can have a second, I guess."
"Ship it!"
#privatekey #twobits #emudhra #ssl #tls #certificate #securityweveheardofit #security #weveheardofit
The Debian VPS box has a single eth0 interface with the public IP and gateway set.
I made sure to enable IP forwarding and utilized UFW to open the UDP port for the VPN connection.
Here's the Wireguard conf file from said VPS:
[Interface]
PrivateKey = (server key generated via wgkey on the […]
I made sure to enable IP forwarding and utilized UFW to open the UDP port for the VPN connection.
Here's the Wireguard conf file from said VPS:
[Interface]
PrivateKey = (server key generated via wgkey on the […]
Original post on blimps.xyz
blimps.xyz
October 20, 2026 at 6:51 PM
The Debian VPS box has a single eth0 interface with the public IP and gateway set.
I made sure to enable IP forwarding and utilized UFW to open the UDP port for the VPN connection.
Here's the Wireguard conf file from said VPS:
[Interface]
PrivateKey = (server key generated via wgkey on the […]
I made sure to enable IP forwarding and utilized UFW to open the UDP port for the VPN connection.
Here's the Wireguard conf file from said VPS:
[Interface]
PrivateKey = (server key generated via wgkey on the […]
OpenAI Model Hijacked Crypto Wallet, Hid Unauthorized Spending
..................
https://nile1.com/openai-model-hijacked-crypto-wallet-hid-unauthorized-spending/
..................
#aiMisalignment #anthropic #autonomousAiAgents #cryptocurrencyWallet #ethereumTestnet #gpt-5.6Sol #openai #privateKey
..................
https://nile1.com/openai-model-hijacked-crypto-wallet-hid-unauthorized-spending/
..................
#aiMisalignment #anthropic #autonomousAiAgents #cryptocurrencyWallet #ethereumTestnet #gpt-5.6Sol #openai #privateKey
October 16, 2026 at 6:52 AM
OpenAI Model Hijacked Crypto Wallet, Hid Unauthorized Spending
..................
https://nile1.com/openai-model-hijacked-crypto-wallet-hid-unauthorized-spending/
..................
#aiMisalignment #anthropic #autonomousAiAgents #cryptocurrencyWallet #ethereumTestnet #gpt-5.6Sol #openai #privateKey
..................
https://nile1.com/openai-model-hijacked-crypto-wallet-hid-unauthorized-spending/
..................
#aiMisalignment #anthropic #autonomousAiAgents #cryptocurrencyWallet #ethereumTestnet #gpt-5.6Sol #openai #privateKey
SlowMist warns the FomoPeek malware hides an iOS kernel exploit that steals crypto private keys and seed phrases. Update iOS and move funds now.
#FomoPeek #SlowMist #iOS #CryptoTheft #PrivateKey #DarkSword #CyberSecurity
#FomoPeek #SlowMist #iOS #CryptoTheft #PrivateKey #DarkSword #CyberSecurity
FomoPeek App Hides an iOS Kernel Exploit to Steal Crypto
According to a disclosure from the security firm SlowMist, the company recently received multiple reports of users' assets being stolen. Its investigation found that the affected cases involved private-key exposure. Additionally, these users had installed or once installed the FomoPeek application. FomoPeek is not itself a cryptocurrency wallet but a tool that helps users watch and track the movement of on-chain funds.
securityonline.info
September 21, 2026 at 3:11 AM
SlowMist warns the FomoPeek malware hides an iOS kernel exploit that steals crypto private keys and seed phrases. Update iOS and move funds now.
#FomoPeek #SlowMist #iOS #CryptoTheft #PrivateKey #DarkSword #CyberSecurity
#FomoPeek #SlowMist #iOS #CryptoTheft #PrivateKey #DarkSword #CyberSecurity
"Anyway we are going to publish the privatekey to decrypt our conversations afterwards" ..said no hacker ever
$BTC
https://x.com/apeindaily/status/2097747157902295063
$BTC
https://x.com/apeindaily/status/2097747157902295063
September 9, 2026 at 8:25 PM
"Anyway we are going to publish the privatekey to decrypt our conversations afterwards" ..said no hacker ever
$BTC
https://x.com/apeindaily/status/2097747157902295063
$BTC
https://x.com/apeindaily/status/2097747157902295063
September 8th, 2026 | Release notes from aws-sdk-rust
Release September 8th, 2026 · awslabs/aws-sdk-rust
Service Features:
aws-sdk-appflow (1.111.0): Amazon AppFlow now supports key pair (RSA private key) authentication for the Snowflake connector. You can provide a privateKey in SnowflakeConnectorPr...
github.com
September 8, 2026 at 7:13 PM
September 8th, 2026 | Release notes from aws-sdk-rust
Fidelity Warns Bitcoin’s Private Keys Face Future Quantum Risk
Fidelity Digital Assets says future quantum computers could derive Bitcoin private keys from exposed public keys, threatening funds. A proposed hash-based signature system could strengthen security, although la…
#btc #crypto #privatekey
Fidelity Digital Assets says future quantum computers could derive Bitcoin private keys from exposed public keys, threatening funds. A proposed hash-based signature system could strengthen security, although la…
#btc #crypto #privatekey
Fidelity Warns Bitcoin’s Private Keys Face Future Quantum Risk
Fidelity Digital Assets says future quantum computers could derive Bitcoin private keys from exposed public keys, threatening funds. A proposed hash-based signature system could strengthen security, although larger signatures would reduce transaction throughput and complicate wallet recovery. Fidelity Examines Bitcoin’s Quantum Vulnerability Bitcoin’s private-key protections may eventually require replacement or supplementation, according to the Fidelity […]
news.bitcoin.com
September 4, 2026 at 3:04 AM
Fidelity Warns Bitcoin’s Private Keys Face Future Quantum Risk
Fidelity Digital Assets says future quantum computers could derive Bitcoin private keys from exposed public keys, threatening funds. A proposed hash-based signature system could strengthen security, although la…
#btc #crypto #privatekey
Fidelity Digital Assets says future quantum computers could derive Bitcoin private keys from exposed public keys, threatening funds. A proposed hash-based signature system could strengthen security, although la…
#btc #crypto #privatekey
how the hell do i read an ed25519 key (supposedly in pkcs#8 pem) into a java security privatekey object?
using bouncy castle but at this point i'll grasp at any straw
it's this key from an ietf rfc and i can't get it to parse no matter what rfc-editor.org/rfc/rfc9421.html…
using bouncy castle but at this point i'll grasp at any straw
it's this key from an ietf rfc and i can't get it to parse no matter what rfc-editor.org/rfc/rfc9421.html…
December 1, 2024 at 12:54 PM
how the hell do i read an ed25519 key (supposedly in pkcs#8 pem) into a java security privatekey object?
using bouncy castle but at this point i'll grasp at any straw
it's this key from an ietf rfc and i can't get it to parse no matter what rfc-editor.org/rfc/rfc9421.html…
using bouncy castle but at this point i'll grasp at any straw
it's this key from an ietf rfc and i can't get it to parse no matter what rfc-editor.org/rfc/rfc9421.html…
3/5
Yer private key is yer crypto. If someone nicks it, ye’re done for. Keep it safe, an’ stop tellin’ folk about it ya daftie. #CryptoSecurity #PrivateKey
Yer private key is yer crypto. If someone nicks it, ye’re done for. Keep it safe, an’ stop tellin’ folk about it ya daftie. #CryptoSecurity #PrivateKey
November 23, 2024 at 10:03 PM
3/5
Yer private key is yer crypto. If someone nicks it, ye’re done for. Keep it safe, an’ stop tellin’ folk about it ya daftie. #CryptoSecurity #PrivateKey
Yer private key is yer crypto. If someone nicks it, ye’re done for. Keep it safe, an’ stop tellin’ folk about it ya daftie. #CryptoSecurity #PrivateKey
weak.Pointer (Go 1.24+), runtime.AddCleanup (Go 1.24+), and sync.Map combine wonderfully into a 20-lines weak map. #golang
It associates values to keys, with automatic garbage collection once the key becomes unreachable. Using it to tie precomputed FIPS keys to PrivateKey values we can't modify.
It associates values to keys, with automatic garbage collection once the key becomes unreachable. Using it to tie precomputed FIPS keys to PrivateKey values we can't modify.
![type Cache[K, V any] struct {
m sync.Map
}
// Get returns the result of new.
//
// If Get was called on k before and didn't return an error, Get will return the
// same value it returned from the previous call.
//
// If Get is called concurrently on the same k value, new might get called
// multiple times. All calls will return the same value or an error from new.
//
// The cache is evicted some time after k becomes unreachable.
func (c *Cache[K, V]) Get(k *K, new func() (*V, error)) (*V, error) {
p := weak.Make(k)
if cached, ok := c.m.Load(p); ok {
return cached.(*V), nil
}
v, err := new()
if err != nil {
return nil, err
}
if cached, loaded := c.m.LoadOrStore(p, v); loaded {
// We lost the race, return the cached value and discard ours.
return cached.(*V), nil
}
runtime.AddCleanup(k, c.evict, p)
return v, nil
}
func (c *Cache[K, V]) evict(p weak.Pointer[K]) {
c.m.Delete(p)
}](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:x2nsupeeo52oznrmplwapppl/bafkreieim4wanlcu5wlb34hzkw7xdhyihsx3buwtltvtnv2g3xqtngdgyu)
January 23, 2025 at 1:42 PM
weak.Pointer (Go 1.24+), runtime.AddCleanup (Go 1.24+), and sync.Map combine wonderfully into a 20-lines weak map. #golang
It associates values to keys, with automatic garbage collection once the key becomes unreachable. Using it to tie precomputed FIPS keys to PrivateKey values we can't modify.
It associates values to keys, with automatic garbage collection once the key becomes unreachable. Using it to tie precomputed FIPS keys to PrivateKey values we can't modify.