Tech Giants Block eMudhra Digital Certificates
A key generation flaw allowed fake websites and compromised HTTPS security
Security Editor: Fabricio Marcilio 1 min read
Tech companies have implemented emergency blocks against eight digital certificates issued by the Indian authority eMudhra Limited. This measure followed the discovery of a critical flaw in the company's private key generation process.
Mozilla engineers confirmed that the method used to create the keys was insecure and easy to exploit. The vulnerability allowed attackers to intercept connections and impersonate legitimate websites to alter or read sensitive user data.
The blocking process was coordinated across various browsers and digital infrastructure platforms. Mozilla applied protections in Firefox and released updates for desktop and Android. Google Chrome, Apple, and Microsoft also integrated the restrictions into their trust systems between Saturday and Tuesday.
Cloudflare also responded to the incident with updates to its network services and security clients. Despite the rapid response from major companies, systems and applications that do not receive automatic updates remain exposed to the risk of forgery.
The incident highlights vulnerabilities in the internet's trust infrastructure that can impact the integrity of online transactions. Security flaws in digital certificates increase operational risk for financial platforms and raise caution regarding the authenticity of network protocols.
Spotted an error? Write to suporte@criptoico.com.br.
More in Security
-
CoinDCX Confirms $16 Million Loss Following Security Breach
The exchange states the loss was absorbed internally and client balances remain untouched.
Security
-
Initia Network Hack Drains USDC Reserves from Asset Bridge
Vulnerability exploit reduced collateral to just 63 dollars and halted user withdrawals on the platform.
Security
-
US Charges Man in $37 Million USDT Money Laundering Scheme
A Chinese national was extradited after a scheme used a Bahamas bank to convert stolen American funds into stablecoins.
Security