‼️ The git, curl and python3 in macOS still trust compromised eMudhra certificates, 11 days after Apple was told.
Anyone can recover their keys, so an attacker on your network could pose as GitHub and feed you code.
Researchers say macOS 27.2 even wiped fixes applied by hand.
International Cyber Digest
@IntCyberDigest
emudhra.we-have-a-problem.com
Apple
Eleven days after Apple was notified of the eMudhra CA compromise, the git, curl and python3 that Apple ships with macOS still trust the compromised certificates.
5:51 PM UTC · Oct 28, 2026 · 5.2K Views
1093