Suresh on Mythryl: “"An attacker with the private key of any of the compromised…”

"An attacker with the private key of any of the compromised intermediate CAs could impersonate any website or service." 😱

Filippo Valsorda@filippo.abyssdomain.expert

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

emudhra.we-have-a-problem.comeMudhra Intermediate CA CompromiseeMudhra Intermediate CA Compromise

20/10/26, 8:50 pm0 reposts0 likes

Post