Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
4 / 4 results
criticalbug_reportVulnerabilityeMudhra CA exits SSL/TLS business after 8 intermediate keys found guessable
eMudhra certificate authority: 8 intermediate CA private keys compromised (6 for TLS). Approximately 30,800 unexpired certificates chained to emSign ECC Root CA - G3, 99.9% issued through InCommon (higher education).
criticalbug_reportVulnerabilityeMudhra CA private keys compromised; MitM attacks possible via rogue certs
Eight intermediate Certificate Authority (CA) private keys from eMudhra Limited (Indian CA). Affects any TLS/SSL certificates issued by these compromised intermediates, including public-facing services, VPNs, APIs, and internal infrastructure relying…
criticalbug_reportVulnerabilityeMudhra CA issued 8 certificates with instantly crackable private keys
eMudhra intermediate certificates issued April 2025 using P-384 keys with values <256. Affects systems using Mozilla NSS, Go (pre-1.27.3/1.26.10), Python certifi, Rust webpki, Electron, and other software with embedded certificate stores.
criticalbug_reportVulnerabilityeMudhra CA private keys compromised; fraudulent certs possible
Eight eMudhra intermediate CA certificates (6 TLS, 2 code-signing) under emSign brand. Affects browsers (Chrome, Firefox, Safari), Go 1.26.x/1.27.x, Python certifi, Rust webpki-roots, NSS, and any software using eMudhra-issued certificates.