Skip to main content

Share story

Security

Cloudflare finds forged eMudhra certificates and persistent patching gaps

Cloudflare finds forged eMudhra certificates and persistent patching gaps Image: Primary
Cloudflare says its monitoring found forged certificates using eMudhra's weak signing keys, including one dated less than an hour after Mozilla's public disclosure. It found no evidence that attackers used the keys to intercept Cloudflare connections. All high-priority Cloudflare systems have been patched. The company recorded about 22,000 attempted handshakes using the weak keys; every handshake configured to verify certificates was refused. Separately, 50 million probes showed that 30-40% of embedded browsers such as Android WebView still accepted the compromised certificates. Cloudflare cautioned that its challenge-page sample was skewed toward bots and included only clients executing JavaScript.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Cloudflare Blog and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Infrastructure Products
Infrastructure Products

CXMT swings to profit as quarterly revenue rises sevenfold

Chinese memory chipmaker CXMT posted a sevenfold increase in quarterly revenue and swung from a loss to a profit, Bloomberg reported. The company expanded capacity aggressively and increased its role as a global supplier of conventional memory, or DRAM.

Capital Products
Capital Products

Greentech Alliance agrees to acquire mobility network Intermobility

Berlin-based Greentech Alliance has agreed to acquire Paris-based Intermobility, bringing a transport network of more than 1,000 companies, public authorities and other participants into its sustainable technology community.