Recently, a significant security flaw was uncovered in the rollout of 360's AI offering, '360 Secure Lobster.' The installation package inadvertently included a wildcard domain SSL private key along with its corresponding certificate, sparking widespread concerns over potential information security breaches. In swift response, 360 has revoked the certificate in question, rendering it null and void, and has confirmed that this incident has had no repercussions for regular users. The root cause of the issue was traced back to a mistake made during the product release process. To mitigate any risks, the company has implemented emergency measures to thwart any attempts by malicious actors to exploit the leaked private key for server impersonation or traffic interception.
