Apple has blocked compromised security certificates on its devices that could help attackers impersonate websites, BleepingComputer reports.
The certificates were issued by certificate authority eMudhra. According to Mozilla’s investigation, their private keys were all numbers below 256, making them almost instantly recoverable. Attackers could use the affected website certificate keys to create fraudulent certificates that vulnerable software would trust.
Apple introduced the blocks on October 19, according to an advisory from Mozilla cryptography engineer Dennis Jackson. These protections stop software using Apple’s system checks from trusting the compromised certificates.
Jackson says Safari and other major browsers had additional certificate checks that would have prevented attacks through this route. Whether attackers exploited other software remains unknown.
Apple has already distributed blocks for the compromised certificates. Mac users who use the affected command-line tools can find tests and mitigation instructions on Jackson’s website.
This article, “Apple Blocks Certificates That Could Help Attackers Fake Websites” first appeared on MacRumors.com
Discuss this article in our forums
Â
This articles is written by : Nermeen Nabil Khear Abdelmalak
All rights reserved to : USAGOLDMIES . www.usagoldmines.com
You can Enjoy surfing our website categories and read more content in many fields you may like .
Why USAGoldMines ?
USAGoldMines is a comprehensive website offering the latest in financial, crypto, and technical news. With specialized sections for each category, it provides readers with up-to-date market insights, investment trends, and technological advancements, making it a valuable resource for investors and enthusiasts in the fast-paced financial world.