CHINA'S BIGGEST CYBERSECURITY FIRM ACCIDENTALLY LEAKED AN SSL KEY IN A PUBLIC INSTALLER

Summary from the TLDR InfoSec newsletter

Qihoo 360, one of the largest cybersecurity companies in China, accidentally shipped a highly sensitive wildcard SSL private certificate in the public installer for its OpenClaw wrapper product. The key can be retrieved by anyone with a basic extraction tool. This comes after the founder of Qihoo promised that the platform would never leak passwords.