Search
+
    SEARCHED FOR:

    GOOGLE CHROME

    eMudhra appoints KPMG to conduct independent review of TLS certificate incident

    Digital trust provider eMudhra appointed KPMG to conduct an independent review of a recent TLS certificate incident. This appointment follows a commitment made by the company to ensure clarity regarding the incident. The incident involved weak private keys associated with several certificate authorities, which remained undetected for a significant period. As a result, eMudhra has withdrawn from its global SSL/TLS certificate business due to security concerns.

    eMudhra faces a bigger test of public trust after security lapse

    The company has voluntarily exited from the global Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate business following the incident.

    What eMudhra security incident means for anyone who shops, banks or pays online

    The eMudhra security incident raised concerns that cybercriminals could potentially use weak private keys to create fake website certificates and impersonate legitimate platforms. Here’s how such an attack could put users’ personal and payment details at risk, and what is known about the incident so far.

    ETtech Explainer: How a flaw in PHP, the code behind 70% of websites, sent governments offline

    Since PHP powers 70% of the world’s websites, the vulnerabilities can allow unauthenticated attackers to execute code on affected servers or read sensitive process memory, which may contain passwords, authentication tokens, API keys and certificates belonging to other requests or the server itself, as per Wiz Research.

    Vulnerable keys were created but never put to commercial use, investigation on: eMudhra cofounder

    eMudhra issues digital signature and website security certificates to enable them securely connect to browsers for public access. "There's no impact to subscribers because we have done all the actions. We are also working with our customers to notify them that there is no impact because no certificates were issued. This does not affect our other lines of business, which is the India digital signature and our enterprise solutions business," eMudhra co-founder Kaushik Srinivasan told PTI.

    Special team to probe eMudhra incident; impact on Indian websites, applications very limited: Govt

    The ministry said the reported security incident pertains to eMudhra’s global certificate business, and its impact on Indian websites is very limited.It also said some social media accounts were indulging in fear-mongering about the impact.

    The Economic Times
    BACK TO TOP
    Advertisement