Simon Willison·· 10d agoSelected
Private keys of eight eMudhra intermediate CA certificates compromised, affecting major browser trust stores
Original source: Simon WillisonRead original
AI brief
The private keys of eight eMudhra intermediate CA certificates have been compromised, allowing them to chain to roots trusted by Mozilla, Microsoft, Apple and Chrome. Any software bundling trusted certificate lists must be updated. New versions of uv, pip and certifi include upgraded certificate lists to mitigate the issue.
Why it matters
This compromise affects the root trust stores of major browsers and platforms, requiring urgent updates to certificate authorities and software to maintain web security.
Source: Simon Willison · simonwillison.net