eMudhra CA key compromise: one of 8 leaked private keys was just the number 4
AIFlow_ML · x · 2026-10-21
- Mozilla disclosed that the private keys of 8 certificates from Indian certificate authority eMudhra were compromised; Firefox blocked them within 3 hours.
- Each key should be a 116-digit number, but one was literally just 4 — trivially guessable.
- Anyone holding these keys could forge HTTPS certificates for any website, a serious MITM risk.
More from Safety
- Black October: LiteLLM credential stealer, npm worm and thousands of poisoned GitHub workflows — AIFlow_ML · 2026-10-23
- Two unpatched 9.0/10 RCE flaws hit Linux's in-kernel SMB server KSMBD — emax · 2026-10-23
- FDA crosses a regulatory watershed with personalized neoantigen cancer vaccine, per Gottlieb — alex_peys · 2026-10-23
- Abliterated GLM-5.3 or DS V4.1 Flash plus compute lets motivated individuals do anything, argues viral thread — khademinori · 2026-10-23
- AI uncovers PHP2Shell flaw threatening the tech behind 70% of all websites — AIFlow_ML · 2026-10-23
- Ben Murphy on this week's cyber events: deployment models and open-source risks — herbiebradley · 2026-10-23