tls

A collection of 1 post

Stories

The eMudhra CA compromise: is your JVM still trusting it?

Eight eMudhra CA keys were weak enough to brute-force, and your JVM may still trust them. Here's what happened, who's exposed, the right fix for vendor JDKs, Debian and distroless images, and a scanner to check your containers....