Search
+
    SEARCHED FOR:

    GOOGLE CHROME UPDATE

    eMudhra faces a bigger test of public trust after security lapse

    The company has voluntarily exited from the global Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate business following the incident.

    What eMudhra security incident means for anyone who shops, banks or pays online

    The eMudhra security incident raised concerns that cybercriminals could potentially use weak private keys to create fake website certificates and impersonate legitimate platforms. Here’s how such an attack could put users’ personal and payment details at risk, and what is known about the incident so far.

    ETtech Explainer: How a flaw in PHP, the code behind 70% of websites, sent governments offline

    Since PHP powers 70% of the world’s websites, the vulnerabilities can allow unauthenticated attackers to execute code on affected servers or read sensitive process memory, which may contain passwords, authentication tokens, API keys and certificates belonging to other requests or the server itself, as per Wiz Research.

    Vulnerable keys were created but never put to commercial use, investigation on: eMudhra cofounder

    eMudhra issues digital signature and website security certificates to enable them securely connect to browsers for public access. "There's no impact to subscribers because we have done all the actions. We are also working with our customers to notify them that there is no impact because no certificates were issued. This does not affect our other lines of business, which is the India digital signature and our enterprise solutions business," eMudhra co-founder Kaushik Srinivasan told PTI.

    Special team to probe eMudhra incident; impact on Indian websites, applications very limited: Govt

    The ministry said the reported security incident pertains to eMudhra’s global certificate business, and its impact on Indian websites is very limited.It also said some social media accounts were indulging in fear-mongering about the impact.

    eMudhra certificates blocked by Google and Mozilla; some legitimate websites may stop working from October 27; here's what happened

    eMudhra intermediate CA certificates (Google Trends): Google and Mozilla have blocked eight compromised intermediate certificate keys linked to eMudhra, an Indian provider of digital trust and cybersecurity services. Weak randomness during key generation could have allowed attackers to forge trusted HTTPS certificates. Although eMudhra says the affected certificates issued no end-user certificates, Google's planned removal of a related root certificate could disrupt some websites.

    The Economic Times
    BACK TO TOP
    Advertisement