Raksasa teknologi bergegas blokir 8 sertifikat eMudhra yang dapat picu situs palsu
Vendor peramban besar-besaran dengan darurat mencabut delapan sertifikat root dan intermediate TLS yang diterbitkan oleh eMudhra setelah para peneliti menemukan celah kritis dalam pembuatan kunci. Kerentanan tersebut memungkinkan penyerang untuk merekonstruksi kunci privat dan memalsukan situs web HTTPS.
- BTC
Browser patches mitigate phishing risks from compromised TLS certificates.
- GGOOG
Chrome security updates rapidly revoke vulnerable eMudhra certificates.
Leading technology companies and browser operators have moved to block eight digital certificates issued by certificate authority eMudhra following a severe cryptographic vulnerability disclosure. Security researchers found that flawed random number generation during key creation produced predictable entropy, allowing third parties to mathematically derive the private keys. With a compromised certificate key, attackers could perform man-in-the-middle attacks and impersonate legitimate HTTPS domains, including banking and crypto exchange portals. Browser updates from Google, Mozilla, and Apple are actively distrusting the affected certificate chains to protect end users. Cybersecurity experts urged Web3 platforms and financial institutions to audit their TLS certificate providers immediately.
Penafian analisis AI
Analisis dampak aset dibuat oleh AI dan hanya untuk tujuan informasi. Ini bukan nasihat keuangan. Selalu lakukan riset sendiri sebelum mengambil keputusan investasi.
Diskusi