Good news: no fraudulent certificates from these CAs were seen in Certificate Transparency logs, so CT-enforcing browsers were protected. MeitY says eMudhra's Indian DSC & eSign services are not affected. Site owners on that root: get a new certificate now.
🚨🇮🇳 BREAKING: India orders probe into eMudhra after 8 of its CA private keys were just numbers below 256, recoverable by anyone.
Chrome, Firefox, Apple & Microsoft blocked them. CERT-In issued an alert.
Certs on emSign ECC Root CA - G3 stop working in Chrome from Oct 27.
5/ What to do:
✅ Update to PHP 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35
✅ Restart PHP workers, rebuild containers
✅ On 8.1 or older: upgrade or ask your vendor
✅ Find forgotten PHP servers
No workaround fully protects you. Patching is the fix.
4/ AI angle: researchers at Calif used OpenAI tools to report the bugs on Aug 11; Wiz (with Google's Gemini) and Trail of Bits found them too. The PHP Foundation says one bug's history goes back to a 2024 audit. (The Record, Google Cloud)
254K Followers 1K FollowingCofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷
234K Followers 6K FollowingFounder @Binary_Defense @TrustedSec. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
49K Followers 0 FollowingDarkFeed: Cyber Threat Intelligence Platform, Putting things at order in the ransomware crazy world
#OSINT | #Ransomware | #Cyberattacks | #Hacktivism
261K Followers 208 FollowingBreaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
73K Followers 401 FollowingProving that cybersecurity is everyone's business. We research what others skip, expose what's buried, and know that the real story is never on the surface.
9.1M Followers 113 FollowingThe full story, first. Free, wherever you get your news @skynewsbreak for breaking news. Live on the Sky News app - download here: https://t.co/NE20fhpQTi
71K Followers 886 FollowingThreat intelligence platform - Data from Deep Web, Dark Web, Open Web || For data API integration : [email protected] Democratizing Cyber Security.
272K Followers 3K FollowingPentester, Forensic investigator, and former college professor. Trained hackers at each US military and intelligence.
Visit me at https://t.co/G478wug0p4
249K Followers 95 FollowingOne guy. Global cybercrime. Tracked so you don't have to. Ransomware, data breaches, dark web activity, darknet markets, IOCs & emerging threats. Stay informed!
211K Followers 0 FollowingCyber Intel 24/7. 🔔 Subscribe for sources and more.
Session ID: 051068fee6cdbbdaf0d7bff81e8e90b073abfd04d5bc574ce0dd93a7a41fc8a773
8.4M Followers 187 FollowingNews feeds from India's National Newspaper.
Subscribe to The Hindu and support credible journalism: https://t.co/oyI0UPPKBR