Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Eight intermediate certificates used in the company’s global website security business had weak private keys, potentially allowing attackers to impersonate websites.
Summary
The affected business accounts for about 1 per cent of eMudhra’s revenue.
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
Web and API vulnerabilities like this are exactly what manual penetration testing is designed to catch, automated scanners routinely miss the logic flaws and chained issues that cause the most damage in practice.
Coverage details
We've archived 20 other articles touching the same topic (digital signature services, tls certificate flaw, emudhra security flaw) , see the full security news archive.
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.