CRITICAL: Bouncy Castle for Java <1.86 lets attackers hijack X.509 identities in MLS groups. Upgrade to v1.86+ for protection. https://radar.offseq.com/threat/in-bouncy-castle-for-java-before-186-the-messaging-layer-security-mls-rfc-9420-implementation-did-not-53cae24ecd925b00 #OffSeq #BouncyCast...
@offseq.bsky.social