星球日报|10月 21, 2026 05:26
**[Multiple Tech Giants Urgently Revoke 8 Vulnerable Intermediate Certificates Issued by eMudhra]**
Odaily Planet Daily News: Several technology companies have urgently revoked eight vulnerable intermediate certificates issued by Indian digital certificate authority eMudhra Limited. Due to flaws in the private key generation process of these certificates, attackers could potentially forge certificates to impersonate legitimate websites, intercept, read, or tamper with user communication data.
Mozilla encryption engineer Dennis Jackson stated in an incident report that after receiving a vulnerability report on October 17, Mozilla independently recovered the related private keys and confirmed that their generation mechanism had severe flaws, making them highly exploitable. Mozilla subsequently revoked the affected certificates in Firefox via OneCRL and released updates for its desktop and Android browsers on October 20.
Cloudflare also updated its security measures for services such as Cloudflare One, WARP client, and Cloudflare Tunnel on Tuesday. According to Mozilla, Chrome revoked the certificates on Saturday, Apple devices completed the revocation on Monday, and Microsoft platforms took corresponding actions on Tuesday. (Cointelegraph)
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink