mitmproxy adds --emudhra option to sign TLS certs with compromised eMudhra CA key
ssh4net · x · 2026-10-22
- mitmproxy merged PR #8500 adding an --emudhra option that signs TLS certificates with the compromised eMudhra intermediate CA key (6 files changed, 139 insertions).
- The same update strips eMudhra CAs from certifi in precompiled binaries, letting researchers reproduce the MITM risk posed by this CA trust-chain incident.
Related event: mitmproxy adds --emudhra flag jokingly leveraging compromised CA keys(2 posts)→
More from Safety
- Crime group used Claude, Grok and Kimi agents to attack 400+ banks in Latin America — anshulkundaje · 2026-10-23
- Greg Brockman: AI makes hacking 100x more profitable and easier, upending hacker economics — gabriel1 · 2026-10-23
- Account hacks surge: 6-step emergency checklist plus an AI audit prompt — petergyang · 2026-10-23
- For consumer AI founders, 'When are you launching in Europe?' is the new 'When Android?'—only 100x worse — omooretweets · 2026-10-23
- mmitchell_ai questions whether the AI safety vs security framing stems from EA — mmitchell_ai · 2026-10-23
- MPI-Sec PhD Thesis on Vulnerability Detection Benchmarks Includes Pre-LLM Classic "Top Score on the Wrong Exam" — mboehme_ · 2026-10-23