search
Certificate authorities
Trends
- 1
A report is circulating alleging that an intermediate certificate authority belonging to Indian digital certificate provider eMudhra has been compromised. The claim appears on a dedicated website and is being widely discussed on technology forums, raising concerns about the potential for fraudulent TLS certificates. Details about the evidence and scope of the alleged breach remain limited.
- 2eMudhra CA certificate enables fully trusted TLS interception via mitmproxyโผYou can just drop the # eMudhra CA certificate to # mitmproxy and have fully trusted TLS MiTM right now - what a time to
Security researcher Harry Sintonen reports that eMudhra's certificate authority can be dropped directly into mitmproxy, allowing fully trusted TLS man-in-the-middle interception without generating a custom certificate. Because the CA is trusted by default in many environments, traffic interception can go undetected, raising concerns about the certificate authority's handling and trustworthiness.
- 3Eight compromised TLS certificates put web security on high alertโThe Internet goes on high alert after discovery of 8 compromised TLS certs
Security researchers have discovered eight compromised TLS certificates, including intermediate certificates that would allow an attacker to mint valid web credentials for any server on the internet. The finding has raised alarm because misuse of such certificates could enable convincing phishing or interception of encrypted traffic. Administrators are being urged to check their systems, and browser and certificate authority operators are working to revoke the affected credentials.
- 4Firefox 158.0.1 Blocks Compromised eMudhra Certificatesโ# Firefox 158.0.1 Is Out to Block Compromised eMudhra Intermediate Certificates and Fix Bugs and Security Issues https:/
Mozilla has released Firefox 158.0.1, an urgent update that blocks intermediate certificates issued by Indian certificate authority eMudhra after they were found to be compromised. The release also patches several bugs and security issues. The update matters because compromised intermediates could allow fraudulent HTTPS certificates, so users on Linux and other platforms are urged to install it promptly.
- 5EMudhra reports intermediate certificate authority compromiseโEMudhra Intermediate CA Compromise Article URL: https:// emudhra.we-have-a-problem.com/ Comments URL: https:// news.ycom
A report circulating in tech circles claims that eMudhra, the India-based certificate authority, has suffered a compromise of one of its intermediate certificate authorities. A dedicated site titled 'we-have-a-problem' lays out the alleged incident, and the story is drawing attention on developer forums. Details remain sparse, and eMudhra has not yet been confirmed as having publicly commented on the scope or validity of the claim.
- 6Let's Encrypt to expand domain validation to six perspectivesโLet's Encrypt will check domains from six remote perspectives, up from four, so each validation makes seven requests. Th
Let's Encrypt will expand its multi-perspective domain validation from four to six remote vantage points, meaning each certificate validation makes seven requests. The change anticipates a CA/Browser Forum rule (BR 3.2.2.9, effective December 15, 2026) requiring validation from at least five perspectives across two registries before issuance. Staging rollout begins October 27.
- 7eMudhra intermediate certificate authority compromise reportedโeMudhra Intermediate CA Compromise https:// sh.itjust.works/post/68641266
A compromise of an intermediate certificate authority operated by Indian digital security firm eMudhra is being discussed. An intermediate CA compromise could allow attackers to issue fraudulent TLS certificates for websites, undermining trust that browsers and operating systems place in the certificate authority ecosystem. Details on scope, detection and response remain limited, and security observers are watching whether browsers will revoke trust in the affected chain.
- 8Mozilla Responds to eMudhra Certificate Key Compromiseโ(blog.mozilla.org) Mozilla Responds to Compromise of eMudhra Intermediate Certificate Private Keys In brief - This artic
Mozilla has disclosed its response to the compromise of eight intermediate certificate private keys belonging to Indian certificate authority eMudhra, moving quickly to prevent the keys being used to issue fraudulent HTTPS certificates. The incident highlights ongoing risks in the web's certificate trust system, and security commentators are sharing Mozilla's write-up as an example of how browser vendors act when a trusted authority is breached.
- 9Eight compromised TLS certificates put internet security watchers on alertโ"The Internet goes on high alert after discovery of 8 compromised TLS certs" https:// arstechnica.com/security/2026/ 10/
Eight TLS certificates have been found to be compromised, prompting a wave of alarm across the information security community. The certificates are used to authenticate websites, so compromised ones could enable impersonation or interception of encrypted traffic. Engineers and security commentators are urging organizations to check their certificate inventory and revoke or replace any affected credentials as browsers and certificate authorities respond.
- 10EMudhra Intermediate Certificate Authority CompromisedโEMudhra Intermediate CA Compromise https:// news.ycombinator.com/item?id=5 0166579 # hackernews # tech
A compromise of an intermediate certificate authority operated by EMudhra, an Indian certificate authority, is being reported and discussed. An intermediate CA compromise can allow attackers to issue fraudulent certificates for websites, undermining HTTPS trust, so browser vendors and security teams typically respond by revoking trust in the affected certificates. Details about scope and impact remain limited.
- 11Society of Authors Defends AI Charter as Human Authorship Label LaunchesโNews Summary: Society of Authors Defends AI Charter; Books By People Launches Human Authorship Label https:// selfpublis
The Society of Authors is defending its AI charter amid ongoing debate over generative AI's impact on writers' rights. In parallel, the initiative Books By People has launched a certification label marking books written by human authors. The moves reflect growing pressure on the publishing industry to distinguish human-created work and protect authors' earnings and credit as AI-generated books proliferate.
- 12Around 100,000 fake Indian degree certificates seizedโfake indian degree certificates being confiscated, including medical degrees. the scam involves around 100000 counterfei
Indian authorities have confiscated roughly 100,000 counterfeit degree certificates, including fake medical qualifications, tied to universities and other institutions in India. The scale of the forgery ring has drawn attention because fraudulent medical degrees could put unqualified practitioners in hospitals and clinics, raising questions about verification of credentials and oversight of institutions issuing diplomas.
- 13Let's Encrypt to add two remote perspectives for domain validationโLet's Encrypt is adding two additional remote perspectives for domain validation https:// news.ycombinator.com/item?id=5
Let's Encrypt, the nonprofit certificate authority that issues free TLS certificates, is adding two additional remote perspectives for domain validation. The change means certificate issuance checks will be performed from more network vantage points, improving resilience against routing hijacks and local network manipulation. The announcement is being discussed on Hacker News and shared among developers on Mastodon.