「360 安全龙虾」客户端包含 TLS 证书私钥；目前证书已被吊销。

此证书由 WoTrus CA 签发，用于 *.myclaw.360.cn 及 myclaw.360.cn 域名。

finance.sina.com.cn/~

#Qihoo #OpenClaw #PKI

Telegram 原文

China's biggest cybersecurity firm accidentally leaked an SSL key in a public installer China's biggest cybersecurity company just made a rookie mistake that even beginner developers usually avoid.

China's biggest cybersecurity company just made a rookie mistake that even beginner developers usually avoid. #cybersecurity #qihoo

Original post on freie-re.de

#Qihoo 360 hat mal eben seinen privaten Schlüssel verloren.
Man konnte deren KI-Assistent "360 Security Claw) herunterladen. Unter `/namiclaw/components/OpenClaw/openclaw.7z/credentials` fand sich der private TLS-Schlüssel (Zertifikat) für alle Domains unter myclaw.360.cn, gültig bis April 2027 […]

#Ludashi #Qihoo #Malware

Telegram 原文 [2/2]

A popular video on #Douyin is from Zhou Hongyi, the co-founder of #Qihoo 360 (a Chinese internet security company), where he discusses the dangers of cyberattacks. In the comments section, users are outdoing each other with praising Zhou. 2/6