Security incidents tagged Certifi. Newest first.
Eight eMudhra Global TLS intermediate CA private keys were found to be cryptographically weak / recoverable (researcher report Oct 18). Mozilla, Chrome, Apple and Microsoft blocked the intermediates; eMudhra revoked them Oct 19 and the ECC root was distrusted as a precaution. Downstream runtimes that ship their own trust stores (Go, Node.js, Electron, Python certifi, curl, etc.) needed emergency CA-bundle updates so they stop trusting the compromised chains.
eMudhra / emSign Global TLS intermediates; any client shipping Mozilla-style CA storesSince Oct 18, 2026
🚨🚨🚨 ALERTE SÉCURITÉ MAXIMALE ! Python est compromis. 🔸 Mettez immédiatement pip à la version 26.2.2 ou plus. 🔸 Dans chaque projet Python (chaque venv) : python -m pip install --upgrade pip 🔸 uv : uv self update (0.13.4 ou plus) 🔸 Mettez aussi à jour les certificats du
8 eMudhra intermediate TLS certs had private keys of just 3 to 8 bits. Anyone could have used them to mint trusted certs for any site. Browsers have blocked them. Linux distros, containers, IoT, and embedded devices are another story. t.co/yCsyEJsqnO
An update on PHP2Shell and the eMudhra certificate compromise. We've confirmed that Appwrite is not affected by PHP2Shell. Appwrite Cloud is also patched for eMudhra in every region. Here's what we've checked and what self-hosted users should do. 🧵
#TechWithMC | eMudhra to exit global website security certificate business after key-generation flaw Its Indian digital signature and eSign services will continue to operate as usual Read More: t.co/AFxrCdzSlz
A Certifying Authority used the number “4” as a private key. eMudhra’s weak keys could let fraudsters fake your bank’s website, padlock included. We’ve written to eMudhra, the Controller of Certifying Authorities and CERT-In asking for a fix. #eMudhra #Cybersecurity t.co/VTxAGHqi6L
#NewsAlert | MeitY says: Impact of eMudhra incident on Indian websites, apps was limited Engages stakeholders to resolve eMudhra incident; here are the other key statements👇 @GoI_MeitY t.co/qeeVfhni77
+6 more on the incident pages above.
