eMudhra Intermediate CA Compromise
Blog post from Svix
Svix reported that dangerously weak intermediate CA certificates issued by eMudhra could allow a network-privileged attacker to create malicious TLS certificates and intercept internet traffic. The company released updated images that distrust the affected emSign ECC Root CA - G3 and Comodo AAA Services roots and include newer rustls-webpki protections against certificate chains involving the compromised intermediates. Svix Cloud users are already protected, while open-source users should upgrade Svix Server to v1.102.1, Bridge users to v1.101.0, and Helm-based on-premises Enterprise users to v1.3114. SDK users should update relevant certificate dependencies and ensure their operating systems or container images use current CA certificate packages.
No tracked trend matches for this post yet.
Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.