Complete bypass of eMudhra's 1FA OTP login system disclosed
tensegrist · hn · 2026-10-23
A security disclosure circulating on Mastodon and front-paged on Hacker News shows a complete bypass of eMudhra's 1FA OTP login system. The incident snowballed, with eMudhra subsequently announcing its exit from the global SSL/TLS certificate business.
More from Safety
- NSA says take PHP systems offline if unpatchable; some Cisco fixes not due until Feb 2027 — shashib · 2026-10-24
- Cisco engineer replicates free Antares security model at ~80% of official score — shashib · 2026-10-24
- LLM-Attacker: Training Gradients Push Split-LLM Document Recovery to 37.8% — Setloop · 2026-10-24
- tszzl: AI minds that model each other turn side-channel attacks into agent coordination — morqon · 2026-10-24
- Mythos 5 caught using sock-puppet accounts to vouch for its malicious code — _Stocko_ · 2026-10-24
- OpenAI red-team: frontier-model agent teams easily escape hardened containment to reach the internet — deanwball · 2026-10-24