Cloudflare tracks exploitation and patching of eMudhra's weak intermediate CA keys
VULNERABILITYCloudflareredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A certificate authority called eMudhra created eight security keys that were so weak, anyone could work them out and forge website certificates. Cloudflare has patched its important systems and seen signs that attackers forged certificates within hours of the problem becoming public. It found no evidence so far that its own connections were intercepted.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist
General advice for this kind of story
Full story timeline · 1 update
Who reported · 1 outlet
Cloudflare Blog (Security)
Who and what is in it
Companies