eMudhra root certificate leak could enable MITM attacks; researchers urge browser and app updates
birchlse · x · 2026-10-22
- Researcher Matt Informed warns of a root certificate leak: an attacker holding a trusted root cert can spoof legitimate sites, relay traffic, and decrypt communications—effectively wiretapping users.
- Potential impact: stolen passwords, read email/messages, intercepted and manipulated app/browser traffic.
- Advice: use only Firefox, Safari, or DuckDuckGo by default; check and install updates for browsers and all apps through the weekend; be extra careful with links in messages and email.
- Real-world impact depends on whether the cert gets weaponized and by whom.
More from Safety
- Cloudflare ships new WAF with full transaction detection, free by default to block php2shell — irvinebroque · 2026-10-22
- Wiblin's plea to AI lab staff: reassess now whether your work delays or accelerates RSI — geoffreyirving · 2026-10-22
- Alignment Is Far More Than an Engineering Problem, Pushing Back on Jensen Huang — ShahabBakht · 2026-10-22
- Teaser: a PHP vulnerability dropping next week will freak out LinkedIn — tlakomy · 2026-10-22
- Reddit essay pushes back on doom: recursive safety improvement could solve AI risk — yfreon · 2026-10-22
- Computer security overhang: infinite free tokens will surface 100,000s of vulns — Afinetheorem · 2026-10-22