ME News reports that on October 21 (UTC+8), multiple tech companies urgently revoked eight intermediate certificates issued by India’s digital certificate authority, eMudhra Limited, due to security vulnerabilities. Due to flaws in the private key generation process, attackers could exploit these certificates to impersonate legitimate websites and intercept, read, or modify user communications.
Mozilla cryptographer Dennis Jackson stated in the incident report that, after receiving the vulnerability report on October 17, Mozilla independently recovered the relevant private key, confirming that its generation mechanism had a serious flaw and was highly exploitable.
Mozilla subsequently blocked the affected certificates in Firefox via OneCRL and released updates for its desktop and Android browsers on October 20. Cloudflare also updated its security measures on Tuesday for services including Cloudflare One, the WARP client, and Cloudflare Tunnel. According to Mozilla, Chrome blocked the relevant certificates on Saturday, Apple devices completed the block on Monday, and Microsoft platforms took corresponding action on Tuesday. (Source: ODAILY)
Major Tech Companies Block 8 Vulnerable eMudhra Intermediate Certificates
KuCoinFlashShare
Summary
Major tech companies have blocked eight vulnerable eMudhra intermediate certificates due to a security flaw in private key generation, which could enable interception of user data. Mozilla confirmed the flaw on October 17 and blocked the certificates in Firefox via OneCRL on October 20. Chrome, Apple, and Microsoft subsequently took separate actions. This move aligns with CFT efforts and may impact liquidity and crypto markets by strengthening trust in digital infrastructure.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.