eMudhra Intermediate CA Compromise

By Chris Swan · InfoQ · Wednesday, 21 October 2026 at 17:30 (2h ago) · Original article ↗

Private keys for eight eMudhra intermediate CA certificates have been compromised, allowing attackers to forge certificates for any site. The keys were revealed due to low entropy, not through a known breach. Browsers blocked them using revocation lists, but other software had to remove the emSign ECC G3 root. Unpatched systems remain exposed to forged certificates, including client auth and mTLS.

You're reading a preview. The full article is published by InfoQ on their website.

Read the full story on InfoQ

Security

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...]

BleepingComputer 27m ago

Security

LiteLLM supply chain attack hoovers up passwords and secrets

Plus a RAT for good measure - get threat hunting now

The Register 39m ago

Security

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through…

The Hacker News 59m ago

eMudhra Intermediate CA Compromise

More Security & Privacy

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

LiteLLM supply chain attack hoovers up passwords and secrets

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor