Skip to content
securitytabs

Covered by 3 outlets — first reported by Cloudflare Blog (Security), Oct 20, 22:20 UTC

8 eMudhra certificates are compromised. Here's what you need to know

MentionsCiscoCloudflare

In brief

Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra . Rather than possessing the mandatory 384 bits of pseudo-random security, several private keys evaluated single-digit and double-digit integers.

From Cisco Talos's coverage.

SecurityTabs reportupdated 12d agoEight eMudhra Certificate Authority Keys Compromised

Continue reading

3 outlets, in the order they reported it.

  1. Cloudflare Blog (Security)First report

    8 eMudhra certificates are compromised. Here's what you need to know

    Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next.

    Read at Cloudflare Blog (Security) Details

  2. Cisco Talos

    Compromised eMudhra intermediate certificates

    Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra .

    Read at Cisco Talos Details

  3. Palo Alto Unit 42

    EMudhra Intermediate CA Certificates Compromised

    Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide.

    Read at Palo Alto Unit 42 Details

Explained

The technology and terms in this story. Learn more