Eight eMudhra certificate keys were so weak that one was the number 4
THE SO WHAT
A root CA shipping intermediate certs with keys as weak as “4” is a systemic failure—anyone could mint trusted certs for any site. If you run production systems, audit your trust store and certificate chains this week; don’t assume browser blocks are a complete safety net.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechOpenAI Invests in Startup That Uses Brain Implants to Detect Cancer
AI labs putting capital into brain-implant cancer detection is a clear move toward owning high-value, regulated data streams—not just models. If you’re in healthcare or neurotech, assume the frontier model providers want to sit closer to the sensor layer and plan your data partnerships accordingly.
Deep & Emerging TechAI Hacking Threat to Banks as BOE, JPMorgan, Meta (META) Tighten Rules
If BOE, JPMorgan, and major platforms are tightening AI-related security rules ahead of regulation, the bar for model and data protection in finance just moved. Treat advanced LLMs and their training data as crown-jewel assets—model governance now belongs in your core cyber program, not as an experiment on the side.
Deep & Emerging TechEU cybersecurity team says unpatched PHP sites may need to go offline
When a national CERT tells you to pull PHP sites offline if you can’t patch fast, web app risk has crossed from theoretical CVE noise into operational disruption. If you’re running PHP in production, treat Wednesday’s 14:00 UTC patch window as a change-freeze event—pre-stage updates, line up rollback, and have a takedown plan for anything you can’t remediate same-day.
Deep & Emerging TechAdd ‘post-AI’ encryption to your to-do list
If OpenAI’s 400+ math results are even partially applicable to cryptanalysis, you can’t wait for a formal “AI-broken” moment to rethink encryption. CISOs should start inventorying where long-lived secrets sit today and which of those need AI-resilient schemes over the next 3–5 years, not 10–15.