Indian CA eMudhra leaked private keys—one was just 4 digits; Firefox blocked in 3 hours
kingslyj · x · 2026-10-21
Mozilla reports that the private keys of 8 certificates from Indian certificate authority eMudhra were compromised. Each key should be a 116-digit number, but one was just 4—anyone can guess it and forge HTTPS certs for any website. Firefox blocked the affected certificates within 3 hours.
More from Safety
- Two unpatched 9.0/10 RCE flaws hit Linux's in-kernel SMB server KSMBD — emax · 2026-10-23
- FDA crosses a regulatory watershed with personalized neoantigen cancer vaccine, per Gottlieb — alex_peys · 2026-10-23
- Abliterated GLM-5.3 or DS V4.1 Flash plus compute lets motivated individuals do anything, argues viral thread — khademinori · 2026-10-23
- AI uncovers PHP2Shell flaw threatening the tech behind 70% of all websites — AIFlow_ML · 2026-10-23
- Ben Murphy on this week's cyber events: deployment models and open-source risks — herbiebradley · 2026-10-23
- Only 8% of cloud vendors support OIDC — dev calls to kill long-lived API keys — cramforce · 2026-10-23