Today for AI
HOT RADAR
toolsHEAT 18.2°

AI CURATED HOT STORY · 10/28/2026

macOS Git Still Trusts Compromised eMudhra Certificates

1 reports archived1 independent sourcesupdated 10/28/2026, 19:03:40
Synthesis & Latest Updates
1 Sources Cross-Validated

Ten days after being notified of the eMudhra certificate breach, Apple's built-in macOS developer tools (Git, curl, Python3) still trust the compromised certificates. The recently released macOS 27.2 even reverted user-applied workarounds, leaving developers exposed to high-risk HTTPS interception and code tampering.

LATEST/Ten days after being notified of the eMudhra certificate breach, Apple's built-in macOS developer tools (Git, curl, Python3) still trust the compromised certificates. The recently released macOS 27.2 even reverted user-applied workarounds, leaving developers exposed to high-risk HTTPS interception and code tampering.

Hourly heat curve

3 fully observed hours
Now
18.2
Peak
19.020:00
24h change
–

The line compares only sources observed throughout; gap hours are interpolated to keep the trend continuous.

Coverage timeline

Total 1 reports · Latest first
  1. Hacker News AIT2·78 pts

    macOS Git Still Trusts Compromised eMudhra Certificates

    • Built-in macOS Git/curl/Python3 still trust leaked eMudhra root certificates, enabling Man-in-the-Middle attacks on HTTPS traffic.
    • The macOS 27.2 update inadvertently reverted user-applied manual fixes, re-exposing systems to security risks.
    • Developers can use specific commands to check if their local Git is affected and must guard against leakage of sensitive credentials like GitHub Tokens.
macOS Git Still Trusts Compromised eMudhra Certificates | Today for AI