In a recent article, Tanya Pandey explains the critical question surrounding eMudhra, a cybersecurity company based in Bengaluru. The incident has raised concerns about the oversight of eMudhra’s international certificate business, which is not under the audit purview of India’s digital signature regulator. The article details the security lapse at eMudhra, where weak cryptographic keys associated with eight intermediate certificate authorities could be reverse-engineered, potentially allowing fraudulent certifica…
Key points
In a recent article, Tanya Pandey explains the critical question surrounding eMudhra, a c…: In a recent article, Tanya Pandey explains the critical question surrounding eMudhra, a cybersecurity company based in Bengaluru.
The incident has raised concerns about the oversight of eMudhra’s international certifica…: The incident has raised concerns about the oversight of eMudhra’s international certificate business, which is not under the audit purview of India’s digital signature regulator.
The article details the security lapse at eMudhra, where weak cryptographic keys associat…: The article details the security lapse at eMudhra, where weak cryptographic keys associated with eight intermediate certificate authorities could be reverse-engineered, potentially allowing fraudulent certificates to impersonate websites or
Sources checked by our analysis pipeline: 1
A security lapse at Bengaluru-based cybersecurity company eMudhra has raised a critical question about who oversees the security of certificates that help establish whether websites and software can be trusted. The incident has also drawn attention to the oversight of eMudhra’s international certificate business, which falls outside the audit purview of India’s digital signature regulator. Tanya Pandey explains what went wrong, who oversees the
ETtech Explainer: Decoding eMudhra’s keys to chaos
Synopsis
Weak cryptographic keys associated with eight intermediate certificate authorities operated by eMudhra could be reverse-engineered, or recovered, potentially allowing the issue of fraudulent certificates to impersonate websites or make malicious software appear trustworthy.
Japan plans to simulate cyberattacks using AI to identify weaknesses in technology systems, as PHP flaws cause widespread disruptions. The government and companies worldwide experienced website outages and emergency alerts due to the critical vulnerabilities in the widely used programming language. Cybersecurity experts have warned that AI is helping attackers automate tasks, making cybercrime faster, cheaper, and harder to detect. Japan has been too comfortable with its existing infrastructure, which it felt was…
The article critiques the "hustle culture" and "winner takes all" mentality in Silicon Valley, arguing that these values are unsustainable. The author advocates for a slower, more collaborative approach and emphasizes building things people love. The article criticizes venture capitalists and warns of startup risks.
have secured approval to deploy AI models overseas, part of a wave of homegrown AI technologies that Beijing is promoting. The approval comes as the Chinese government is implementing stricter export controls, including the requirement to register and obtain approval for AI models before they can be exported. This move is seen as a response to the growing global competition in the AI sector and a push for self-reliance in the technology domain.