{
  "id": 16043332,
  "title": "Apple Blocks Certificates That Could Help Attackers Fake Websites",
  "url": "https://urgent.news/2026/10/22/apple-blocks-certificates-that-could-help-attackers-fake-websites",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-22T11:43:09.000Z",
  "source": {
    "name": "MacRumors",
    "slug": "macrumors",
    "url": "https://www.macrumors.com/2026/10/22/apple-blocks-certificates-that-could-help-attackers/"
  },
  "original_language": "en",
  "account": "Apple has taken action to block security certificates that could enable attackers to impersonate websites, reports BleepingComputer. The certificates were issued by certificate authority eMudhra, according to Mozilla's investigation. Mozilla found that the private keys associated with these certificates were composed of numbers less than 256, which could be easily recovered by malicious actors. Attackers could leverage these certificates to create fraudulent ones that would be trusted by vulnerable software. Apple implemented these blocks on October 19, as per an advisory from Mozilla cryptography engineer Dennis Jackson. These safeguards prevent software utilizing Apple's system checks from trusting the compromised certificates. Mozilla's Jackson noted that Safari and other major browsers had additional certificate checks that would have thwarted attacks via this method. The extent to which attackers may have exploited other software remains unclear. Apple has already distributed blocks for the compromised certificates. Mac users who utilize the affected command-line tools can access tests and mitigation instructions on Jackson's website.",
  "summary": "Apple has blocked compromised security certificates on its devices that could help attackers impersonate websites, BleepingComputer reports . The certificates were issued by certificate authority eMudhra. According to Mozilla's investigation , their private keys were all numbers below 256, making them almost instantly recoverable. Attackers could use the affected website certificate keys to…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}