Trust & Security
Bouncy Castle CVE-2026-71885 Harvested the Credential Binding That Authenticates Agent-to-Agent Channels
A critical MLS identity spoofing flaw in the crypto library that underpins Java, Android, and enterprise identity stacks means agent-to-agent secure channels can be impersonated – and the exploitation status remains contested.
◆ Heath Callahan