eMudhra cert compromise actually happened in April 2024, not last week
kingslyj · x · 2026-10-21
Researcher kingslyj corrects the timeline: an Indian CA (eMudhra) didn't break its promise "last week" — the 8 compromised certs were generated in April 2024 and only detected last week. Adding irony, eMudhra published a "Comprehensive Guide" to Custom Public Key Infrastructure on July 11, 2025, two months after minting the bad certs.
More from Safety
- FDA crosses a regulatory watershed with personalized neoantigen cancer vaccine, per Gottlieb — alex_peys · 2026-10-23
- Reddit Discusses 'Black October': AI-Driven Attacks Shake Cybersecurity — Anen-o-me · 2026-10-23
- Abliterated GLM-5.3 or DS V4.1 Flash plus compute lets motivated individuals do anything, argues viral thread — khademinori · 2026-10-23
- AI uncovers PHP2Shell flaw threatening the tech behind 70% of all websites — AIFlow_ML · 2026-10-23
- Ben Murphy on this week's cyber events: deployment models and open-source risks — herbiebradley · 2026-10-23
- Only 8% of cloud vendors support OIDC — dev calls to kill long-lived API keys — cramforce · 2026-10-23