TLDR DevOps · MISCELLANEOUS

8 EMUDHRA CERTIFICATES ARE COMPROMISED. HERE'S WHAT YOU NEED TO KNOW

blog.cloudflare.com4 min read

Summary from the TLDR DevOps newsletter

Private keys for eight widely trusted eMudhra intermediate certificates were compromised on October 19, allowing attackers to forge certificates for any domain. Cloudflare has patched its CDN, Zero Trust, and Tunnel products. Customers must update the Cloudflare One Client and 1.1.1.1 app to specific versions to remain protected.