Today for AI
HOT RADAR
toolsHEAT 11.9°

AI CURATED HOT STORY · 10/28/2026

macOS Git Still Trusts Compromised eMudhra Certificates

1 reports archived1 independent sourcesupdated 10/28/2026, 19:03:40
Synthesis & Latest Updates
1 Sources Cross-Validated

Ten days after being notified of the eMudhra certificate breach, Apple's built-in macOS developer tools (Git, curl, Python3) still trust the compromised certificates. The recently released macOS 27.2 even reverted user-applied workarounds, leaving developers exposed to high-risk HTTPS interception and code tampering.

LATEST/Ten days after being notified of the eMudhra certificate breach, Apple's built-in macOS developer tools (Git, curl, Python3) still trust the compromised certificates. The recently released macOS 27.2 even reverted user-applied workarounds, leaving developers exposed to high-risk HTTPS interception and code tampering.

Hourly heat curve

20 fully observed hours
Now
11.9
Peak
18.521:00
24h change
-36%

The line compares only sources observed throughout; gap hours are interpolated to keep the trend continuous.

Coverage timeline

Total 1 reports · Latest first
  1. Hacker News AIT2·78 pts

    macOS Git Still Trusts Compromised eMudhra Certificates

    • Built-in macOS Git/curl/Python3 still trust leaked eMudhra root certificates, enabling Man-in-the-Middle attacks on HTTPS traffic.
    • The macOS 27.2 update inadvertently reverted user-applied manual fixes, re-exposing systems to security risks.
    • Developers can use specific commands to check if their local Git is affected and must guard against leakage of sensitive credentials like GitHub Tokens.