科技巨头紧急阻止8个eMudhra证书,以防范虚假网站

在研究人员发现一个关键的密钥生成漏洞后,各大浏览器厂商正在紧急撤销由eMudhra签发的8个TLS根证书和中间证书。该漏洞允许攻击者重建私钥并冒充HTTPS网站。
- BTC
Browser patches mitigate phishing risks from compromised TLS certificates.
- GGOOG
Chrome security updates rapidly revoke vulnerable eMudhra certificates.
Leading technology companies and browser operators have moved to block eight digital certificates issued by certificate authority eMudhra following a severe cryptographic vulnerability disclosure. Security researchers found that flawed random number generation during key creation produced predictable entropy, allowing third parties to mathematically derive the private keys. With a compromised certificate key, attackers could perform man-in-the-middle attacks and impersonate legitimate HTTPS domains, including banking and crypto exchange portals. Browser updates from Google, Mozilla, and Apple are actively distrusting the affected certificate chains to protect end users. Cybersecurity experts urged Web3 platforms and financial institutions to audit their TLS certificate providers immediately.
AI 分析免责声明
资产影响分析由 AI 生成,仅供参考,不构成投资建议。做出投资决策前,请务必自行研究。




讨论