Indian AI agent startup leaves breach unpatched for a week; eMudhra CA key was literally "4"
kingslyj · x · 2026-10-21
Developer ravikp7 reports that a week after flagging a possible data breach at a large Bangalore-based AI agent startup — where he could access government IDs and driving licences of many foreign nationals — the data is still exposed and the company is slow to patch, calling security and privacy "a joke" in India.
A quoted post adds another case: one of eMudhra's CA private keys was literally the number 4. Google and Mozilla acted within hours, but MeitY's CCA, which licenses eMudhra, and CERT-In have issued no public advisory — "literally zero accountability."
More from Safety
- Sanders calls to pause autonomous AI agents in bank accounts; critics push back — AIandDesign · 2026-10-23
- TechPolicy essay: system prompts are weak evidence of AI safety, outputs must be evaluated — mmitchell_ai · 2026-10-23
- Anthropic's deputy security chief warns cyber threats will get 'a lot worse before they get better' — Polymarket · 2026-10-23
- AI cyberattacks could paradoxically accelerate AI development in an offense-defense arms race — kimmonismus · 2026-10-23
- AI Now's People's AI Assembly spotlights data center opposition and labor rights — AINowInstitute · 2026-10-23
- Cloudflare CEO: Next two years of AI cyberattacks will be terrifying but make the internet more secure — johncoogan · 2026-10-23