eMudhra intermediate CA keys leak enables MITM attacks

blog.pragmaticengineer.com14 min read

The author argues that AI is shifting the balance of power between attackers and defenders by drastically lowering the barrier to exploiting software vulnerabilities. This trend was underscored by a series of major security incidents, including a compromised certificate authority, critical PHP vulnerabilities discovered using AI, and a customer secrets leak at Railway. The author suggests that organizations must rethink software security through automated patching, ongoing monitoring, and the use of defensive AI agents. Open article →