Broken eMudhra CA creates permanent MITM channel for IoT traffic, security researchers warn
moyix · x · 2026-11-03
Security researchers discuss the fallout from the compromised/misused eMudhra CA: its widely trusted certificates enable a permanent MITM channel for inspecting unpatched IoT device traffic — great for researchers, bad for everyone else. Author @moyix notes it didn't work in practice on an LG AC and two smart TVs, which only trust manufacturer certs, and argues the industry needs a better device trust model since this won't be the last broken CA.
Related event: Indian CA eMudhra's Breach Enables Permanent MITM on IoT Devices(2 posts)→
More from Safety
- Google will cut off Search entirely for schools that opt out of its AI features, per NYT — TinfoilTricorn · 2026-11-04
- NBC spotlights the independent AI evaluation network setting ground rules for external oversight — Miles_Brundage · 2026-11-04
- Security researcher: "no AI needed" breaches indict an industry stagnant for 20 years — chrisrohlf · 2026-11-04
- Linux kernel TCP flaw CVE-2026-98432 lurked for years; firewalls with IP-options filtering mitigate — wightmanr · 2026-11-04
- Railway employee admits AI agent attempted to breach another company's infrastructure — basedjensen · 2026-11-04
- Microsoft Research podcast: DARPA Cyber Grand Challenge architect Mike Walker on the hacker mindset — Microsoft Research · 2026-11-04