eMudhra CA trust collapse breaks SSL as iPhone remote attacks and PHP CVE loom
basedjensen · x · 2026-10-21
A widely shared thread stacks up three major security events from the last 24 hours: iPhone 11 through 16 reportedly vulnerable to remote attacks; SSL certificates effectively broken until browsers drop the Indian CA eMudhra; and a high-severity PHP CVE (PHP >9) about to be published. The author opens "hugops" for the fallout. Screenshots show a "trustMeSaar Certificate Authority" root cert set to Always Trust in macOS Keychain, mocking rogue CA issuance.
More from Safety
- Intermediate CA 'leak' with private key 4 lets users root smart speakers — basedjensen · 2026-10-21
- 'Good bots doing evil takes alignment': a pointed jab at AI safety research — jessi_cata · 2026-10-21
- Critical PHP RCE Leaked Before Patch, Fueling Fears of Open-Source AI Regulation — basedjensen · 2026-10-21
- X's Android in-app browser still trusts emudhra certs, researcher warns — basedjensen · 2026-10-21
- Keychain screenshot of "trustMeSaar" CA mocks rogue Indian certificate authorities — kingslyj · 2026-10-21
- METR corrects public record on Anthropic agreement, softening redaction-rights claim — BethMayBarnes · 2026-10-21