Cisco routers trust eMudhra CAs whose private keys were numbers under 256
murat_kocaoglu_ · x · 2026-10-27
Cisco IOS XR routers and Meraki cameras trust eight eMudhra certificate authorities whose private keys were simply numbers below 256 — recoverable in seconds, allowing forged HTTPS certificates for any website. Cisco is still investigating whether ASA firewalls are affected too, and observers expect the fallout to grow.
More from Safety
- Anthropic's S-1 unusually discusses AI sentience and moral status risks — birchlse · 2026-10-27
- UK AISI papers: no good safeguards yet against misuse of biological AI tools — davidmanheim · 2026-10-27
- Washington's message to AI execs: Please shut up — TobyWalsh · 2026-10-27
- Are Meta Muse, Grok Bot and OpenAI Dots really safe hands for our privacy? — Neat-Flight8381 · 2026-10-27
- PHP2Shell exploits confirmed in the wild, attackers may use agentic AI for post-exploitation — AravSrinivas · 2026-10-27
- php2shell exploit benchmark: only 2 of 5 frontier models can port the bug — xeophon · 2026-10-27