eMudhra TLS intermediates found compromisable due to weak randomness
rickasaurus · x · 2026-10-21
Researchers disclosed that eMudhra's TLS intermediate certificates were compromisable because they lacked proper randomness in key generation. Intermediates hold private keys trusted to issue domain certificates — a compromised key would let attackers forge certificates, intercept HTTPS traffic, and break end-to-end encryption.
More from Safety
- Black October: LiteLLM credential stealer, npm worm and thousands of poisoned GitHub workflows — AIFlow_ML · 2026-10-23
- Two unpatched 9.0/10 RCE flaws hit Linux's in-kernel SMB server KSMBD — emax · 2026-10-23
- FDA crosses a regulatory watershed with personalized neoantigen cancer vaccine, per Gottlieb — alex_peys · 2026-10-23
- Abliterated GLM-5.3 or DS V4.1 Flash plus compute lets motivated individuals do anything, argues viral thread — khademinori · 2026-10-23
- AI uncovers PHP2Shell flaw threatening the tech behind 70% of all websites — AIFlow_ML · 2026-10-23
- Ben Murphy on this week's cyber events: deployment models and open-source risks — herbiebradley · 2026-10-23