2026-10-20 17:52 UTC
Oh my this is bad. The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.
eMudhra Intermediate CA Compromise
https://emudhra.we-have-a-problem.com/
Replies (4)
-
@drizzy@cyberplace.social 2026-10-20 18:03
@nixCraft@mastodon.social it's worse than bad. Their private key secret is number 4 apparently.
-
@biglinter@mastodon.social 2026-10-20 18:07
@nixCraft@mastodon.social this gets even worse in our day and time... imagine your iot solution relies on one time settable certifications (efuses) and theyre deployed on lotsa places to do lotsa things... in short you just put out a sh.tload of paperweights.
-
@steter@mastodon.stevesworld.co 2026-10-20 19:33
@nixCraft@mastodon.social Ubuntu and Linux Mint have CA certificate updates.
-
@gaiantheinvincible@mastodon.social 2026-10-20 21:42
@nixCraft@mastodon.social ha, ha! eat it, techbro sukkas!