Python closes critical TLS flaw tied to eMudhra keys in update

Python 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 fix a critical vulnerability caused by compromised eMudhra certificates, ...
HealthcareInfoSecurity

Exposed LiteLLM Key Enabled PyPI Supply Chain Attack

An open-source artificial intelligence model gateway allowed a threat actor to gain owner-level access to its entire GitHub ...
Cybernews

eMudhra quits issuing trust certificates after blunder triggers Java and Python updates

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...
ZDNet

Python programming: PyPl is rolling out 2FA for critical projects, giving away 4,000 security keys

PyPI or the Python Package Index is giving away 4,000 Google Titan security keys as part of its move to mandatory two-factor authentication (2FA) for critical projects built in the Python programming ...

The Java, Node.js, Go, and Python certificate issue was one single event. eMudhra's key collapse and the order of this week's updates

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...
The Hacker News

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

Eight eMudhra CA keys were compromised, prompting browser blocks and software fixes. Chrome found no rogue certificates in CT ...