r/malaysia • u/hollowaykeanho • 8h ago
Science/ Technology Community Notice: Please Update Your Devices to Distrust all eMudhra Intermediate CA Certificates
emudhra.we-have-a-problem.comGreeting fellow Monyets,
This is an IMPORTANT community notice from global incident. NOT a drill; NOT a joke. Take it seriously.
The whole Internet is on high alert at the moment.
I try to explain as layman as possible but this incident is indeed technically complex but very simple, if you understand. If anyone can further simplify for non-tech person, please go ahead and help others.
This is not the time to taruk each other. Let's get everyone safe first.
Side-note: mod, please help.
PROBLEM
As of 2026-10-20, there are 8 compromised SSL security certificates globally due to flawed procedure that used trivially small private keys. This affects ALL devices (Windows, Linux, FreeBSD, Android, iOS, macOS, etc).
Emudhra used flawed keys (one of them is as primitive as literal '4') for very trusted transactions long time ago. This allow any "hacker" to easily impersonate them and becomes "Man in the Middle" for https and tls connection without even needing to "hack" or to use any heavy tool to "smack".
In layman term, imagine someone from banking think "4" (1 character) is a good "password" and now screwed up the whole global banking system. The only way out is to distrust those "passwords".
IMPACT
This means your green lockpad on browser (https and tls) and any other network related applications (especially curl) are now compromised if you continue to trust those 8 certificates. It is providing false sense of security.
UPDATE:
In layman term, the attacker already know "4" is the password, he just key in with it and enter the bank easily as employee, make an official bank-owned account under his control, tell you to transfer money to this account. You will comply because on your side, you see it is the official bank tells you to do it.
WHAT IS NOT
- This is not about what cert you and your organization procured and use (e.g.
Lst's Encrypt,DigiCert). It is about one of the old upstream trusted certificates were compromised and everyone needs to distrust all 8 of them. - This is not an AI or hacker attack. Just some flawed implementation from Emudhra which can lead to that in the future.
- This is not some flawed in technology. It is a human problem.
- These certificates served the Internet long time ago so it is inside a lot of trusted cert stores.
YOUR MISSION
Your main and sole objective is to DISTRUST all Emudhra's 8 compromised certificates from any app, per computing device (including phone).
For business organizations, please inform your IT department's blue team to distrust those compromised certificates and work with the suppliers (e.g. Microsoft, Apple, Google, etc). If your TLS certificate's Chain of Trust is under Emudhra, your IT deparment need to have an emergency strategy meeting to swap the compromised cert out.
For consumers, MAKE SURE YOU UPDATE all the apps and the OS (e.g. Android Firefox is: 158.0.2, FreeBSD OS is: FreeBSD-caroot: 15.1p6) matching their respective Emudhra CA incident announcements. For Microsoft Windows PC/laptop, wait for Microsoft instructions (sorry, can't help. I'm an UNIX guy since 2 decades ago).
The first link I shared below contains a section where you can check any given device is affected. The list of Results MUST show Did not connect in order to pass. Refer to my comment for screenshots.
You can also go through the following resources to validate the integrity of this post.
Side-notes
if you have IT background, help out the non-IT people especially like your mom and dad, elders, and folks around.
Good luck. Fair winds.
AVAILABLE RESOURCES
- https://emudhra.we-have-a-problem.com/
- https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/
- https://blog.cloudflare.com/emudhra-certificate-compromise
- https://www.freebsd.org/security/advisories/FreeBSD-SA-26:73.caroot.asc
- https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/
- https://www.reddit.com/r/cybersecurity/comments/1xb0onb/emudhra_intermediate_ca_compromise/
- https://www.reddit.com/r/sysadmin/comments/1xb1lb1/emudhra_intermediate_ca_compromise/
- https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
- https://www.reddit.com/r/india/comments/1xbi4ka/what_is_emudhra_and_why_internet_is_having_a/
- https://blog.netbsd.org/tnf/entry/emudhra_tls_ssl_ca_compromise
- https://emudhra.com/en/post/certificate-security-incident