Apple, Google, and Mozilla have blocked compromised security certificates on its devices that could help attackers impersonate websites
Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites, reports Bleeping Computer.
Major browsers and operating systems trusted the compromised certificates, potentially allowing attackers to impersonate legitimate websites and intercept encrypted communications, the article adds.
A security researcher known as Wayne discovered the weakness on October 17 while scanning publicly available certificate data. According to Mozilla’s incident report, all eight certificates used P-384 private keys generated in April 2025 that had values smaller than 256, allowing anyone to recover them by testing just 256 possible numbers.
I hope you’ll help support Apple World Today by becoming a patron. Almost all our income is from Patreon support and sponsored posts. Patreon pricing ranges from $2 to $10 a month. Thanks in advance for your support.
