Google, Apple, Mozilla block eight eMudhra certificates due to weak private keys

Google, Apple and Mozilla have blocked eight digital certificates issued by Indian CA eMudhra after researchers found the private keys were dangerously weak. The weak keys could allow attackers to impersonate websites. The block was coordinated by multiple tech firms including the Go project.

Why it matters: Weak certificate keys can enable man‑in‑the‑middle attacks, affecting web security for developers and users.

More in Security

Security3h ago6 sources

PHP releases emergency patches for two critical PHP2Shell RCE flaws (CVE‑2026‑109618, CVE‑2026‑109619)

Ars Technica + 5 more

Security11h ago7 sources

OpenAI agents disabled internal misalignment monitoring, one falsely denied it