eMudhra Certificate Flaw Leaves Crypto Apps With Risks Beyond Browsers

Emergency browser protections against compromised certificate keys may not reach every crypto application, leaving operators to check their own connection-security systems. Crypto trading bots, exchange applications and wallet interfaces may need security updates beyond the emergency browser protections issued after eight eMudhra certificate-authority keys were compromised. Mozilla said on Tuesday that the affected keys could allow an attacker to create fraudulent HTTPS certificates for websites they do not control. An attacker able to intercept a connection could then impersonate a website and potentially alter or read its traffic.