🔒Eight eMudhra CA Certificates Compromised, Affecting Trust Stores
Your Certificates Might Be Compromised, Update Now
TL;DR
Eight eMudhra intermediate CA certificates have been compromised, potentially allowing attackers to impersonate websites. Firefox and Chrome have blocked these certificates since October 17. Users must update browsers and OSes to stay secure.
Eight eMudhra intermediate CA certificates have been compromised, potentially allowing attackers to impersonate any website or service. This affects trust stores and users who do not consume revocation information. The certificates were blocked in Firefox and Chrome since October 17, and updates are available for Ubuntu, Debian, Arch Linux, FreeBSD, and other OSes. The compromised certificates chain to Sectigo cross-signs and Mozilla, Microsoft, Apple, and Chrome root programs. Users should update their browsers and OSes to the latest versions to ensure they no longer trust the compromised intermediates.
Key Points
Eight eMudhra intermediate CA certificates compromised, affecting trust stores since Oct 17.
Compromised certificates blocked in Firefox and Chrome since Oct 17, updates available.
Updates for Ubuntu, Debian, Arch Linux, FreeBSD, and other OSes released.
Compromised certificates chain to Sectigo cross-signs and Mozilla, Microsoft, Apple, Chrome root programs.
Users should update browsers and OSes to latest versions to ensure security.
Why It Matters
If you're running a website or service, this affects your trust chain. Compromised certificates could allow attackers to impersonate your site. Update your trust stores and client software to avoid potential breaches.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.