Mozilla, Google, and Apple Block Compromised eMudhra CA Certificates Following Key Weakness Discovery
Eight eMudhra intermediate certificates revoked after researchers found private keys were cryptographically weak and could be instantly recovered
Key Takeaways
- eMudhra revoked eight intermediate CA certificates due to critically weak RSA private keys that could be recovered instantly.
- Researchers demonstrated the key weakness, which theoretically allowed forgery of trusted certificates for any domain.
- Mozilla, Google, and Apple updated their trust stores to block the compromised intermediates, protecting users globally.
Related Security News
Critical PHP Vulnerabilities Exploited in the Wild, Widespread Patching Required
Security researchers have identified two critical vulnerabilities in the PHP core software that are being actively exploited in the wild. The flaws allow remote attackers to seize full control over affected servers. Approximately 70 percent of websites running unpatched PHP core software are expected to experience outages, including 404 or 'Page Not Found' errors, as administrators apply emergency patches. Working exploits are available, and the vulnerabilities have been reported as already being used by attackers.
CISA Adds Four Plex2Shell Vulnerabilities to KEV Catalog, Mandates Federal Patching
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities impacting Plex Media Server, collectively tracked as Plex2Shell, to its Known Exploited Vulnerabilities (KEV) catalog. The directive mandates federal civilian executive branch agencies to patch the flaws by November 18, 2026. While one CVE (CVE-2026-96652, SSRF, CVSS 5.3) was detailed in initial reporting, the full set of four vulnerabilities constitutes the Plex2Shell bundle. CISA's action requires agencies to remediate the vulnerabilities to reduce exploitation risk.
