Mmastodon TechnologyCybersecurity first seen 14 h ago, last 14 h ago, peak #5
Apple blocks compromised eMudhra certificates in Safari, gaps remain in macOS tools
Original: Apple blocks compromised eMudhra certificates in Safari, yet says its macOS git and curl can still accept them until a f
Apple has blocked certificates from Indian certificate authority eMudhra in Safari after reports they were compromised, but warns that macOS command-line tools like git and curl may still accept the affected roots until a future update. Security researcher Dennis Jackson reports macOS 27.2 also reverted manual fixes users had applied. Apple offers a workaround while cautioning that removing the root certificates outright could break some legitimate services.
Why now: A compromised certificate authority being only partially blocked leaves many macOS users exposed through everyday developer tools.
AppleeMudhraSafarimacOSDennis Jackson
Evidence
- Apple blocks compromised eMudhra certificates in Safari, yet says its macOS git and curl can still accept them until a future update. Dennis Jackson reports macOS 27.2 also reverted manual fixes. Apple offers a workaround and warns removing the roots can break some legitimate… · technotenshi@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/4028324