As cited
Copy frozen at (site build).
vulnerabilities
The Internet goes on high alert after discovery of 8 compromised TLS certs
Eight transport layer security (TLS) intermediate certificates issued by India-based certificate authority eMudhra Limited were found to have private keys weak enough to allow unauthorized certificate issuance. Browser makers and major applications blocked all eight certificates within hours, but updating embedded systems, Internet of Things devices, and Linux distributions poses a significant challenge. Certificate transparency logs show no malicious use to date.
Why it matters: Organizations worldwide must urgently verify that their infrastructure, applications, and devices have revoked or blocked these eight eMudhra intermediates to prevent attackers from minting fraudulent certificates trusted across the Internet.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
The Internet goes on high alert after discovery of 8 compromised TLS certs
Eight transport layer security (TLS) intermediate certificates issued by India-based certificate authority eMudhra Limited were found to have private keys weak enough to allow unauthorized certificate issuance. Browser makers and major applications blocked all eight certificates within hours, but updating embedded systems, Internet of Things devices, and Linux distributions poses a significant challenge. Certificate transparency logs show no malicious use to date.
Why it matters: Organizations worldwide must urgently verify that their infrastructure, applications, and devices have revoked or blocked these eight eMudhra intermediates to prevent attackers from minting fraudulent certificates trusted across the Internet.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
The Internet goes on high alert after discovery of 8 compromised TLS certs
Eight transport layer security (TLS) intermediate certificates issued by India-based certificate authority eMudhra Limited were found to have private keys weak enough to allow unauthorized certificate issuance. Browser makers and major applications blocked all eight certificates within hours, but updating embedded systems, Internet of Things devices, and Linux distributions poses a significant challenge. Certificate transparency logs show no malicious use to date.
Why it matters: Organizations worldwide must urgently verify that their infrastructure, applications, and devices have revoked or blocked these eight eMudhra intermediates to prevent attackers from minting fraudulent certificates trusted across the Internet.
- Source published
- First seen by Cybersecurity Tracker