Tag
Microsoft's Azure Linux release bundles hundreds of CVE references and distrusts roots tied to the eMudhra incident CVE-2026-114406; here is what to update and verify.
audiotale.net team5 min read
How CT logs, SCTs and monitors work, and why the October 2026 eMudhra intermediate keys are dangerous mainly to clients that do not enforce it.
audiotale.net team5 min read
Microsoft's 26 October out-of-band update strips six eMudhra roots and one cross-sign from Windows' trust list; it is for PCs that can't get certificate updates automatically.
audiotale.net team7 min read
Roots, intermediates, trust stores and revocation explained step by step, using this week's eMudhra intermediate-certificate compromise as the worked example.
audiotale.net team7 min read
Eight eMudhra CA certificates had private keys with values below 256, letting anyone forge trusted certificates; browsers blocked them, but libraries, distros and containers still need patching.
audiotale.net team10 min read