eMudhra Revokes Eight Intermediate CA Certificates After Weak Private Keys Found

·3 views

Researcher Scott Helme showed that the private keys of eight intermediate certificates from eMudhra, an Indian certificate authority behind the emSign brand, were tiny single-byte numbers, one of them simply four. Because the keys could be recovered from public certificates in under a second, the findings were reported to root programs on 17 October 2026. Chrome and Mozilla blocked the affected intermediates the same evening, and eMudhra revoked all eight by the following morning. Trust stores bundled with software such as Go, NSS, Python certifi, Rust and Homebrew were updated over the next few days, while a Node.js fix was still pending. Mozilla removed one emSign root from NSS, and Chrome is reviewing the other emSign root.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

SnapTicket Turns Client-Side Crashes Into Engineering Tickets Automatically

SnapTicket is a tool designed to close the gap between vague user crash reports and the structured issue trackers engineering teams rely on. It combines macOS diagnostic crash logs (.ips files) with screenshots of on-screen errors, using the Gemma 4 model to correlate the two and identify the likely cause. Users can choose to attach visual evidence or send a text-only report for privacy reasons. The resulting tickets are dispatched either directly through the GitHub REST API or staged for submission through a browser-based assistant.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Critical FortiSIEM flaw CVE-2026-106173 enables privileged file overwrite via gRPC

Fortinet has disclosed CVE-2026-106173, a critical path traversal vulnerability in the phQueryMaster service of its FortiSIEM security information and event management platform. The flaw lies in a gRPC interface on TCP port 27918, which builds file paths from caller-supplied query identifiers without adequate validation. Attackers could exploit it to overwrite a script that cron runs every minute with elevated privileges, granting code execution. Horizon3.ai has published a technical analysis and proof-of-concept, and Fortinet recommends upgrading to version 7.5.1 or later, or restricting access to the affected port in the interim. This is the third FortiSIEM vulnerability Horizon3 has reported, following two earlier flaws in a different service.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

KubeSilicon Lets Developers Run Linux VMs on Apple Silicon Macs via Kubernetes

KubeVirt cannot run on Apple Silicon Macs because it depends on KVM, which macOS lacks. The author, who maintains the private cloud operator VirtFoundry, built KubeSilicon to fill that gap for local development. Users declare a SiliconVM object in a local cluster, and a daemon running on the Mac boots a Linux ARM64 guest using Apple's Virtualization.framework. Pods in the cluster can then reach the VM by IP or DNS name, and the author reports VMs reaching Running in about six seconds once the image is cached. The project is validated only on kind with Docker Desktop and is a separate API from KubeVirt, aimed at laptop use rather than production Linux servers.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

12 Free Browser-Based PDF Tools for Developers, No Upload or Sign-Up Needed

A developer who runs DonePDF, a free site offering over 90 PDF utilities, has highlighted a dozen tools suited to developer workflows. Most of these tools run entirely in the browser, so files never leave the user's machine and no account is required. The featured tools cover conversions between PDF and formats such as Markdown, JSON, HTML, and Base64, plus diffing, validation, analysis, sanitizing, and repair. The browser tools rely on open-source libraries including pdf.js, pdf-lib, Fabric.js, and Tesseract.js, while a few heavier tasks still run on the server and are labeled as such. The author invited readers to suggest further PDF tasks they handle manually or by script.

0 comments Read more at DEV Community