Google, Apple and Microsoft blocked eight vulnerable certificates issued by Indian firm eMudhra on Tuesday, according to CertiK. The company said these measures reduce risks for browser clients but may not protect applications that rely on separate security systems. Attackers could exploit the compromised certificates to impersonate crypto platforms, replace deposit addresses or trick users into approving malicious transactions. Such an attack would still require intercepting or redirecting internet traffic and would not, on its own, expose users’ wallet private keys. CertiK urged crypto operators to update their software and certificate trust stores and verify that their applications reject the affected certificates.
Source: Read the original article
