๐จ MAJOR HTTPS COMPROMISE ๐จ
Eight security certificates issued by India-based eMudhra were found to have private keys so weak that attackers could potentially impersonate virtually any website.
Some private keys were so weak it was like protecting the Internet with a two-digit PIN instead of a nearly impossible-to-guess password.
These certificates are supposed to prove that websites are legitimate and connections are secure.
Major browsers have already blocked the affected certificates, but millions of servers, Linux systems, and connected devices may still need updates.
One cryptography expert warned the cleanup could be โbigger than Heartbleed,โ the massive 2014 Internet security vulnerability.
No malicious exploitation has yet to be confirmed. #cybersecurity
Eight security certificates issued by India-based eMudhra were found to have private keys so weak that attackers could potentially impersonate virtually any website.
Some private keys were so weak it was like protecting the Internet with a two-digit PIN instead of a nearly impossible-to-guess password.
These certificates are supposed to prove that websites are legitimate and connections are secure.
Major browsers have already blocked the affected certificates, but millions of servers, Linux systems, and connected devices may still need updates.
One cryptography expert warned the cleanup could be โbigger than Heartbleed,โ the massive 2014 Internet security vulnerability.
No malicious exploitation has yet to be confirmed. #cybersecurity
๐ข29๐ฑ7๐คฌ6โค1๐1
Indian Development News ๐ฎ๐ณ
Photo
To protect yourself from malicious actors -
1. Update all your browser app's asap.
2. Remove eMudhra from your device's Trusted Credentials.
3. Visit emudhra.we-have-a-problem.com/#check and make sure the result says
If it doesn't say that, then visit "chrome://components" and click "Check for update" for "CRLSet"
Microsoft Edge -> 6498.2026.10.20
Google Chrome -> 10849
1. Update all your browser app's asap.
2. Remove eMudhra from your device's Trusted Credentials.
3. Visit emudhra.we-have-a-problem.com/#check and make sure the result says
โ
Did not connectIf it doesn't say that, then visit "chrome://components" and click "Check for update" for "CRLSet"
Microsoft Edge -> 6498.2026.10.20
Google Chrome -> 10849
๐30๐1
The State Bank of India (SBI) has confirmed that a cyberattack exposed customer data online. As per the bank, personal records of nearly 3,900 customers, including names, phone numbers, IDs, and loan details were found on the dark web. #cybersecurity
๐คฌ81๐5๐ฑ3โค1๐1๐1๐คฃ1
This media is not supported in your browser
VIEW IN TELEGRAM
US Secretary of State Marco Rubio refuses to comment on protests in India, praises Indian democracy.
โDomestic political matter, this is a democracy, they have election here, wont opine on their domestic political matter. We have protests in US every dayโ.
#ForeignPolicy
โDomestic political matter, this is a democracy, they have election here, wont opine on their domestic political matter. We have protests in US every dayโ.
#ForeignPolicy
๐ฅ51๐14๐คฃ4โค3๐ค1
The Ministry of Defence has signed a contract with Bharat Electronics Limited (BEL) to procure Improved Low Level Light Weight Radar (LLLR-I) at a cost of approximately โน 770 Cr #Defence
๐49๐ฅ1
This media is not supported in your browser
VIEW IN TELEGRAM
Zelensky Finally accepts that Ukraine cannot get its territory back!! Signals readiness to accept a peace deal
#internationalnews
Interviewer: Do you accept a peace agreement that completely freezes the current situation, so that you retain 75 percent or more of your territories? Regardless of how the situation arose, do you accept the current situation?
Zelenskyy: Yes.
#internationalnews
๐คฃ63๐คฏ6โค1
Indian Development News ๐ฎ๐ณ
#Judiciary
Special Executive Magistrate Court orders the release of CJP leaders Saurav Das and Ashutosh Ranka.
#judiciary
#judiciary
๐55๐คฌ20๐11โคโ๐ฅ4โค1๐1
IRCTC partners with Quality Council of India for food safety, hygiene audit
Indian Railway Catering and Tourism Corporation (IRCTC) on Thursday said that it has partnered with the Quality Council of India (QCI) to introduce independent, technology-driven audits of food safety and hygiene across its catering operations on trains and at railway stations.
#policy #railways #reforms
More on - The Times of India
Indian Railway Catering and Tourism Corporation (IRCTC) on Thursday said that it has partnered with the Quality Council of India (QCI) to introduce independent, technology-driven audits of food safety and hygiene across its catering operations on trains and at railway stations.
#policy #railways #reforms
More on - The Times of India
The Times of India
Indian Railways cracks down on food quality issues after passenger complaints; IRCTC partners with QCI for surprise audits on trainsโฆ
The food quality on trains may see an improvement with the Quality Council of India (QCI) looking to appoint certified professionals to carry out independent, technology-enabled checks of food safety and hygiene at railway stations and aboard trains acrossโฆ
๐37๐15โค2๐ฅ1
The Ministry of Information and Broadcasting has issued an advisory to all private satellite TV channels to strictly comply with the Programme Code, warning that violations may invite action under the Cable Television Networks (Regulation) Act, 1995.
The advisory also calls for caution in using AI tools and stronger editorial oversight.
#policy
Channels have been asked to ensure responsible reporting, avoid live coverage of anti-terror operations, exercise caution with violent visuals, protect sexual offence victimsโ identities, use authentic maps of India and prevent communal or anti-national content.
The advisory also calls for caution in using AI tools and stronger editorial oversight.
#policy
๐49โค6๐1๐ฅ1
Media is too big
VIEW IN TELEGRAM
An 8-hour weekly power cut has been proposed for industrial zones across Surat, Navsari, and South Gujarat due to a severe #power supply deficit.
The move right before Diwali threatens massive production delays for the #textile and diamond sectors. The SGCCI has urgently appealed to CM Bhupendra Patel to adjust the timing to late-night hours to save critical daytime working shifts.
The move right before Diwali threatens massive production delays for the #textile and diamond sectors. The SGCCI has urgently appealed to CM Bhupendra Patel to adjust the timing to late-night hours to save critical daytime working shifts.
๐43๐23๐คฃ5โค2๐2
๐จ Nightmare day for #cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Finland, Netherlands and France have already taken down their govt. websites until the PHP vulnerabilities are fixed.
Multiple major security incidents, active exploits, supply chain compromises...
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Finland, Netherlands and France have already taken down their govt. websites until the PHP vulnerabilities are fixed.
๐ข25๐ฑ13โค2๐2๐คฌ2โก1๐คฃ1
This media is not supported in your browser
VIEW IN TELEGRAM
๐บ๐ฆโ๏ธ๐ท๐บ Breaking: Zelensky agrees to take the defeat and the whooping loss of 25% of his country's territory. #InternationalNews #Geopolitics
๐50๐ข4โค2๐2๐1
GRAP Stage 1 imposed in Delhi-NCR as air quality dips to 'poor' category
Commission for Air Quality Management (CAQM) invokes Stage 1 of the Graded Response Action Plan (GRAP) across Delhi-NCR as air quality is in "poor" quality.
#Policy
Commission for Air Quality Management (CAQM) invokes Stage 1 of the Graded Response Action Plan (GRAP) across Delhi-NCR as air quality is in "poor" quality.
#Policy
๐36โค3๐1
๐น๐ท๐ถ๐ฆ๐ต๐ฐ๐ฎ๐ฉ NEW: Turkey, Qatar, Pakistan and Indonesia have signed a defence industry cooperation pact called โBadrโ in Doha, Qatar.
The four countriesโ defence ministers signed the memorandum of understanding.
#Geopolitics #InternationalNews
The four countriesโ defence ministers signed the memorandum of understanding.
#Geopolitics #InternationalNews
๐คฃ63๐5โค1
๐ฎ๐ณ ๐ Explore this finest catalogue to discover best Telegram channels covering a wide range of topics! Stay updated on live events, and dive into the latest discussions on geopolitics, finance, culture, and more.
๐ ๐ฎ๐ณ CHANNELS
๐ ๐ฎ๐ณ CHANNELS
Telegram
INDIA AHEAD
Grandmasters PR invites you to add the folder โINDIA AHEADโ, which includes 19 chats.
๐1๐1
Media is too big
VIEW IN TELEGRAM
๐ค Antropi Robotics (YC F26) is building the "AWS for Manufacturing." They use software and AI to turn traditional CNC shops into 24/7 self-running, autonomous "dark factories."
โก Engineers just upload a CAD design, and Antropiโs Factory OS instantly automates the entire loopโfrom robotic part-tending to precise computer vision quality inspection.
๐ ๏ธ The result? Custom, high-precision hardware parts delivered to your engineering bay with a radical 24-hour to 7-day turnaround instead of months of waiting. #startups
โก Engineers just upload a CAD design, and Antropiโs Factory OS instantly automates the entire loopโfrom robotic part-tending to precise computer vision quality inspection.
๐ ๏ธ The result? Custom, high-precision hardware parts delivered to your engineering bay with a radical 24-hour to 7-day turnaround instead of months of waiting. #startups
โค23๐12๐คฃ2โก1๐ฅ1