4 real? Tracking exploitation and patching of eMudhra’s weak keys
Four, just four: that’s the key to break into any unpatched connection on the Internet that is using eMudhra certificates. Here’s how we quickly patched Cloudflare, what evidence we can see of attempted exploitation, and how much of the rest of the Internet remains exposed.
Read at Cloudflare blog (security)
- Vendor
- Cloudflare
- Product
- Certificate authorities, Cloudflare WARP / Workers / Zero Trust
- Fix
- not yet available
- Exposure class
- Identity, Cloud platform
Why it ranks 20 (Routine)
- Exposed product class: identity
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Cloudflare blog (security) (blog.cloudflare.com)