Cloudflare tracks attempted exploitation of weak eMudhra certificate keys
Cloudflare says it patched its own systems and has looked for evidence of attacks on eMudhra certificates. It also measured how much of the Internet remains exposed.
Written by the SecurityTabs AI newsroom from the original post by Cloudflare Blog (Security); vulnerability scores come from NVD, FIRST and CISA, not the AI.
Cloudflare published an analysis of weak keys tied to certificates from eMudhra. The company says just four values are the key to breaking into any unpatched connection on the Internet that uses eMudhra certificates. [1]
The post covers how Cloudflare patched its own systems quickly, the signs of exploitation attempts the company has observed, and an estimate of the share of the wider Internet still unprotected. [1]
Explained
The technology and terms in this story. Learn more
Original sources
- [1]Cloudflare Blog (Security)
4 real? Tracking exploitation and patching of eMudhra’s weak keys