CONNECT WITH US
Apple

Apple

Apple Blocks Certificates That Could Help Attackers Fake Websites

MacRumors - Apple logo

Published on

Add as a preferred source on Google
Apple Blocks Certificates That Could Help Attackers Fake Websites

Apple has blocked compromised security certificates on its devices that could help attackers impersonate websites, BleepingComputer reports . The certificates were issued by certificate authority eMudhra. According to Mozilla's investigation , their private keys were all numbers below 256, making them almost instantly recoverable. Attackers could use the affected website certificate keys to create fraudulent certificates that vulnerable software would trust. Apple introduced the blocks on October 19, according to an advisory from Mozilla cryptography engineer Dennis Jackson. These protections stop software using Apple's system checks from trusting the compromised certificates. Jackson says Safari and other major browsers had additional certificate checks that would have prevented attacks through this route. Whether attackers exploited other software remains unknown. Apple has already distributed blocks for the compromised certificates. Mac users who use the affected command-line tools can find tests and mitigation instructions on Jackson's website . Tag: Cybersecurity

This article, " Apple Blocks Certificates That Could Help Attackers Fake Websites " first appeared on MacRumors.com Discuss this article in our forums



Source link
Related Topics:Apple

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.