Mozilla, Google and Apple Block Compromised eMudhra Certificates
Certificate authority eMudhra revoked eight intermediate certificates after researchers found their private keys could be recovered almost instantly.
AfroEuropa Newsroom
AfroEuropa desk
Certificate authority eMudhra has revoked eight compromised intermediate certificates after researchers determined that their private keys were weak enough to be recovered almost immediately, according to BleepingComputer. With those keys exposed, an attacker could forge trusted certificates for legitimate websites.
The root of the problem was a flaw in how the private keys were generated. Cointelegraph reported that the weakness allowed anyone to guess the keys and produce fraudulent HTTPS certificates for any website, which could be used to impersonate genuine sites.
eMudhra is an Indian company that issues certificates vouching for the identity of websites, CoinDesk reported. The outlet noted that the compromise represents a generic security risk rather than one specific to cryptocurrency.
Keep reading
OpenAI Engineer Charged With Planting Spy Device in Executive Conference Room
Abdulrahman Alfozan, a Saudi national working as an OpenAI engineer, was charged with hiding a recording device in a San Francisco meeting room.
Other highlights
Oppo Find X10 Pro Max Pairs Triple 200MP Cameras With Hasselblad Teleconverter Kit
Oppo's new flagship offers three 200-megapixel cameras, a 2nm chip and a 7,150mAh battery, plus an optional Hasselblad telephoto accessory lens.
Follow the story
One newsletter, two continents
The Bridge brings you the tech, startups, and leaders moving between Africa and Europe in one sharp email each morning. No spam, unsubscribe anytime.
