NewsArs Technica — Security
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Teaser from the source
Flubbed key signing "ceremony" allowed minting of web credentials for any site.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Ars Technica — SecurityMore on eMudhra
Other advisories
- Not ratedosv:CVE-2026-115929MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs
- HighCVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificates
- HighCVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificates
- Not ratedosv:CVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificates
- CriticalCVE-2026-111943eMudhra intermediate CA private keys compromised
- CriticalCVE-2023-43902eMudhra emSigner: unzureichende Zugriffskontrolle
- MediumCVE-2023-43900eMudhra emSigner: Sicherheitslücke
- CriticalCVE-2023-43902eMudhra emSigner: unzureichende Zugriffskontrolle
Other news entries
- Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate AuthoritiesNewsCisco PSIRT
- eMudhra-TLS-Leck: Apple lässt Problem auf macOS-Kommandozeile zunächst bestehenNewsheise Security
- „Passwort“ Folge 69: Die Hütte brenntNewsheise Security
- Microsoft releases Windows OOB updates to distrust eMudhra certificatesNewsBleepingComputer
- Microsoft releases out-of-band Windows fixes with certificate updatesNewsThe Register — Security
- Compromised TLS CertificatesNewsSchneier on Security
- eMudhra quits global TLS certificate market after compromise of CA signing keysNewsCSO Online
- eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily GuessableNewsThe Hacker News
ID