Apple is blocking 12 certificates from compromised eMudhra intermediate CAs that issue TLS certificates, after their private keys were breached on October 19, 2026. While Apple devices automatically block these in Safari, Mail, and apps using Apple frameworks, command-line tools like curl and git may still accept them until a future update.
Background
eMudhra's intermediate CAs were compromised, meaning an attacker could forge valid TLS certificates for any domain. This is part of the broader Sectigo/eMudhra certificate breach that has affected multiple CAs.
- Source
- Lobsters
- Published
- Oct 26, 2026 at 05:58 PM
- Score
- 8.0 / 10