Kya hua
India ek high-level cyber audit meeting ki taiyari kar raha hai jismein PHP flaw, eMudhra ke 8 compromised intermediate certificates, aur live Indian networks tak pahunchne wale frontier AI agents par Cert-In ki late-night advisory ko review kiya jayega.
Mujhe kya farq padta hai
Developers aur SME owners ko apne PHP installs ki list banani hogi, patch ya front WAFs lagane honge, aur shadow infrastructure hatana hoga, jabki eMudhra SSL/TLS business se bahar nikal raha hai.
Yaad rakh
India ki agli cyber-audit meeting ka ek solid agenda hai: PHP, eMudhra, aur AI agents.
Audit mein kya cover hoga
Ek high-level review se teen cheezon ko examine karne ki umeed hai: PHP flaw, eMudhra certificate-key compromise, aur live Indian systems tak pahunchne wale frontier AI agents par Cert-In ki advisory.
Aur context aur kis par asar
New Delhi ek high-level cyber review aur audit meeting ki taiyari kar raha hai. Yeh PHP flaw, eMudhra ke certificate-key leak aur Cert-In ki advisory ko dekhega jiske mutabik frontier AI agents live Indian networks tak pahunch gaye hain.
eMudhra ne 22 October ko kaha ki woh SSL/TLS certificate business se bahar nikal raha hai. Iske 8 affected intermediate certificates 30 April 2025 ke key-generation ceremony mein ek wrap/unwrap flaw ke baad publish hue the, jo 18 mahine tak undetected raha aur do audits se bhi paar nikal gaya.
Google, Apple, Microsoft aur Mozilla ne eMudhra ko apne root stores se hata diya, aur iske shares lagbhag 40% gir gaye. Ek official ne Business Standard ko bataya ki SME ki taiyari "very weak" hai — kai credentials vendor default par hi rehte hain. Experts salah dete hain ki PHP installs ki inventory banayein, unpatchable systems ke aage WAF lagayein aur koi shadow infrastructure na rakhein.
- Affected certificates
- 8 eMudhra intermediate certificates jinke private keys compromise ho gaye the aur withdraw kar liye gaye the.Business TodayReuters
- Vulnerability window
- 18 months Woh time jab key flaw undetected raha aur do rounds ke audits pass kar gaya.Reuters
- Share price drop
- ~40% Flaw disclose hone ke baad do trading days mein eMudhra ke shares mein aayi girawat.Business TodayReuters
General Public · Msme Owners
Forged certificates kisi bhi domain ka roop le sakte hain, isliye banking aur login pages ko spoof kiya ja sakta hai.
Developers · Business Executives
Teams ko PHP installs ki inventory banani hogi, patch ya front WAFs lagane honge, aur shadow infrastructure rakhna band karna hoga.
Business Executives · Msme Owners
eMudhra ke shares lagbhag 40% gir gaye kyunki Google, Apple, Microsoft aur Mozilla ne iske root trust ko hata diya.
ReportingBusiness Today ↗Business Standard ↗Reuters ↗Cloudflare ↗
Sources aur jaanch4 sources · 4 daave
Yeh is khabar ke source records hain. Source link hona apne aap mein independent confirmation nahi hai.
- Business TodayReporting
eMudhra, PHP security scare: Govt to hold high level review, audit to assess potential damage ↗
Publish hua Oct 23, 2026 · Dekha gaya Oct 23, 2026 - Business StandardReporting
Govt plans cyber audit as digital fault lines emerge amid security breaches ↗
Publish hua Oct 22, 2026 · Dekha gaya Oct 23, 2026 - ReutersReporting
India's eMudhra exits website security business after flaws trigger global alarm ↗
Publish hua Oct 22, 2026 · Dekha gaya Oct 23, 2026 - CloudflareOfficial
8 eMudhra certificates are compromised. Here's what you need to know ↗
Publish hua Oct 20, 2026 · Dekha gaya Oct 23, 2026
Daave aur unke sources
Central government PHP flaw, eMudhra key compromise aur Cert-In ki AI-agents advisory par ek high-level review aur audit meeting taiyar kar rahi hai.
22 October 2026 ko eMudhra ne announce kiya ki woh voluntarily SSL/TLS certificate business se withdraw kar raha hai, kyunki 8 intermediate certificates compromise ho gaye the.
Yeh vulnerability 30 April 2025 ke key-generation ceremony mein ek wrap/unwrap flaw se aayi thi, jo 18 mahine tak undetected rahi, aur do audits pass kar gayi.
Ek senior official ne Business Standard ko bataya ki SME cybersecurity bahut weak hai, aur kai credentials vendor default password par hi chhod diye gaye hain.
