Earlier this month, a security researcher discovered that private cryptographic keys associated with eight of Indian company eMudhra's intermediate certificate authority (CA) certificates were weak. The compromised keys could have allowed attackers to impersonate legitimate websites, potentially putting users' sensitive information at risk. However, there is currently no evidence that the keys were exploited maliciously. eMudhra's certificates were widely trusted by all major web browsers, including Safari, Chrome, Edge, and Firefox, but Apple and the other companies behind those browsers have since taken action to protect users. In a support document, Apple said it has been blocking eMudhra's compromised TLS web certificates since October 19 in Safari, Mail, and apps that use Apple's networking and security frameworks. The certificates are blocked automatically with no software update required, so most Apple device owners do not need to take any action. There is one exception. Apple said those who use macOS command-line tools, such as system administrators, should be aware that some of those tools can still accept the compromised certificates until Apple releases a macOS update with a fix. In the meantime, Apple said those who use command-line tools can remove root CA certificates from the /etc/ssl/cert.pem file, with more details outlined in the support document. Apple has not provided a release date for the macOS update that will include the necessary changes to the /etc/ssl/cert.pem file by default. For more technical details, read Apple's support document. Popular StoriesApple Explains Why Chrome Users Should 'Switch to Safari'Tuesday October 13, 2026 5:29 am PDT by Joe RossignolApple has launched a new "Switch to Safari" marketing campaign that encourages Chrome users to switch to Safari as their web browser of choice on the Mac. "Safari is a more powerful and private browser than Chrome," says Apple. Apple has a new "Switch to Safari" page on its website that outlines more than 10 reasons that Chrome users should switch to Safari, including faster performance...Apple Wants to Fix Safari's Cramped Layout on iPhone DuoApple is considering changes to Safari on the iPhone Duo that would give websites access to more of the outer display, although the company has yet to settle on an approach. The challenge is allowing pages to occupy the area beneath Safari's side-mounted controls without making parts of a website inaccessible. In an Friday, October 23 WebKit post, Apple's Jen Simmons explained that an...Crackgate? iPhone Duo Owners Report Screens Breaking Along the HingeFriday October 23, 2026 11:05 am PDT by Juli CloverSome iPhone Duos are already experiencing hinge issues that cause display cracks, based on photos shared on Reddit and the MacRumors forums. Almost all of the display faults are right along the hinge, and most result in a line of bright pixels across one side of the screen. An iPhone Duo owner in Australia said his device cracked after being opened fewer than 20 times, and there was no...
Apple Addresses Web Security Threat, Working on macOS Update With Additional Fix
Full Article
Original Source
Read the full article at Macrumors →KhanList aggregates and links to publicly available news content. We do not host full articles from third-party sources. Always verify important information with original sources.