Skip to content
securitytabs

Covered by 3 outlets — first reported by Google Security Blog, Oct 20, 19:49 UTC

Protecting Chrome and Android Users from Compromised eMudhra Intermediate CA Certificates

MentionsAndroidCiscoGoogleGoogle Chrome

In brief

Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra . Rather than possessing the mandatory 384 bits of pseudo-random security, several private keys evaluated single-digit and double-digit integers.

From Cisco Talos's coverage.

SecurityTabs reportupdated just nowEight eMudhra Certificate Authority Keys Compromised

Continue reading

3 outlets, in the order they reported it.

  1. Google Security BlogFirst report

    Protecting Chrome and Android Users from Compromised eMudhra Intermediate CA Certificates

    The Chrome Root Program received a report from a security researcher regarding the compromise of private keys associated with eight eMudhra subordinate Certification Aut…

    Read at Google Security Blog Details

  2. Cisco Talos

    Compromised eMudhra intermediate certificates

    Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra .

    Read at Cisco Talos Details

  3. Palo Alto Unit 42

    EMudhra Intermediate CA Certificates Compromised

    Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide.

    Read at Palo Alto Unit 42 Details

Explained

The technology and terms in this story. Learn more