Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

Unauthenticated remote root CA installation via eMudhra emBridge 3.3.1.0 (drive-by to TLS MITM) on RHEL-family Linux operating systems

Karan Saini

4,514 subscribers

18,925 views • 1 day ago •via X (Twitter)

Science & Technology

Anya Rossi• Live Now

Private livecam show

11 Comments

nisarga1 day ago

banger after banger

Karan Saini1 day ago

thx boss ;-)

Nevidium1 day ago

looks like you will take down their rest of the business too!! Thanks for exposing these liars

Lane Henslee1 day ago

eMudhra sells certificates for a living, and emBridge lets any website install its own root CA for free

Sumith1 day ago

Same as CVE-2026-125659 ?

Karan Saini1 day ago

No, different bug, affects the latest build

Yaksh Bariya23 hours ago

Lemme see what embridge is, and if I can recreate it. Anyways when you publish the writing, do let me know

Underdog1 day ago

Saini sahab on top

Soham1 day ago

Which rhel? We are running rhel 8 and 9 in our org

Salman Asad ⚡14 hours ago

🔥

jyotishbaba23 hours ago

patal lok

Related Videos

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.

The Lunduke Journal

37,025 views • 6 months ago

Linux is the future of operating systems.

Linux is the future of operating systems.

Ilya Miro

114,784 views • 2 months ago

Every Hidden Advantage of Operating Systems Explained (Linux) #linux #hiddenadvantage #viewsproblem

Every Hidden Advantage of Operating Systems Explained (Linux) #linux #hiddenadvantage #viewsproblem

White Page

179,600 views • 5 months ago

Linux is the future of operating systems. #linux #techtok #desktop #ui #archlinux

Linux is the future of operating systems. #linux #techtok #desktop #ui #archlinux

ilyamiro

908,100 views • 2 months ago

Operating System Age Verification Bill Signed Into Law in Illinois HB-5511, which will require Age data collection on all Operating Systems (including Linux, FreeBSD, and others), was signed by Governor Pritzker.

Operating System Age Verification Bill Signed Into Law in Illinois HB-5511, which will require Age data collection on all Operating Systems (including Linux, FreeBSD, and others), was signed by Governor Pritzker.

The Lunduke Journal

21,003 views • 3 months ago

Mac, Windows, & Linux Are ALL Developed By AI Now Most major Operating Systems now coded by AI, & that rate is accelerating. The number of AI code submissions to Linux doubled in the last week alone.

Mac, Windows, & Linux Are ALL Developed By AI Now Most major Operating Systems now coded by AI, & that rate is accelerating. The number of AI code submissions to Linux doubled in the last week alone.

The Lunduke Journal

29,825 views • 2 months ago

WARNING: Linux Age Checks Age verification laws are hitting operating systems like Linux and Graphene OS. Are your digital privacy rights slipping away? Let me know your thoughts on this controversial systemd update! #linux #ageverification #grapheneos

WARNING: Linux Age Checks Age verification laws are hitting operating systems like Linux and Graphene OS. Are your digital privacy rights slipping away? Let me know your thoughts on this controversial systemd update! #linux #ageverification #grapheneos

David Bombal

29,867 views • 7 months ago

Red Hat Enterprise Linux #AI is now available across the hybrid cloud. Build AI your way: #RHEL

Red Hat Enterprise Linux #AI is now available across the hybrid cloud. Build AI your way: #RHEL

Red Hat

21,270 views • 2 years ago

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services

λL-D1 | AI for Buzzer 🍉

42,278 views • 24 days ago

California Law to Require Linux, Windows Implement Age Verification by Jan 1, 2027 A new California Law (AB-1043), signed by Governor Gavin Newsom, requires all Operating Systems (from macOS to FreeBSD) to implement age verification, at the system level, this year.

California Law to Require Linux, Windows Implement Age Verification by Jan 1, 2027 A new California Law (AB-1043), signed by Governor Gavin Newsom, requires all Operating Systems (from macOS to FreeBSD) to implement age verification, at the system level, this year.

The Lunduke Journal

117,419 views • 8 months ago

Linux Mac?! This is Mac themed Linux installation video! What would you like to see next?! #techmakesart #computernerd #homelab #linux #elementaryos

Linux Mac?! This is Mac themed Linux installation video! What would you like to see next?! #techmakesart #computernerd #homelab #linux #elementaryos

TechMakesArt

74,800 views • 1 year ago

Kali Linux Installation. (4 Minutes guide)

Kali Linux Installation. (4 Minutes guide)

Oluwatobi Mustapha

88,144 views • 1 year ago

Democrats Introduce Bill to Require Age Verification on Linux, Windows "Age Attestation on Computing Devices" (Colorado State Bill 26-051) would require age verification on all Operating Systems (both Open Source and proprietary), with fines for violations.

Democrats Introduce Bill to Require Age Verification on Linux, Windows "Age Attestation on Computing Devices" (Colorado State Bill 26-051) would require age verification on all Operating Systems (both Open Source and proprietary), with fines for violations.

The Lunduke Journal

349,545 views • 8 months ago

Illinois Operating System Age Verification Law Passes House, Moves to Senate Illinois HB 5511, which would require all Operating Systems (Linux, Windows, etc.) to include Age Verification, is moving closer to becoming law. And it's a really WEIRD one.

Illinois Operating System Age Verification Law Passes House, Moves to Senate Illinois HB 5511, which would require all Operating Systems (Linux, Windows, etc.) to include Age Verification, is moving closer to becoming law. And it's a really WEIRD one.

The Lunduke Journal

30,143 views • 6 months ago

This is one of the most controversial operating systems to ever exist. Omarchy is currently gathering huge buzz, specifically for its founder #linux #omarchy #software

This is one of the most controversial operating systems to ever exist. Omarchy is currently gathering huge buzz, specifically for its founder #linux #omarchy #software

Coding with Lewis

25,400 views • 1 month ago

Who's driving Age Verification in Operating Systems (Windows, Linux, etc.)? In the USA, it's Facebook. In Canada, it's... a porn company. Seriously.

Who's driving Age Verification in Operating Systems (Windows, Linux, etc.)? In the USA, it's Facebook. In Canada, it's... a porn company. Seriously.

The Lunduke Journal

13,879 views • 6 months ago

Arch Linux: The Minimalist Linux Distribution Built for Users Who Want Complete Control, Featuring a Rolling-Release Model, Powerful Customization, and a Legendary Learning Curve That Makes You Build the System Your Way 🐧💻 | Arch Linux, Linux, Customization, Open Source, Operating Systems #ArchLinux #Linux #LinuxDistro #TechExplained #OpenSource

Arch Linux: The Minimalist Linux Distribution Built for Users Who Want Complete Control, Featuring a Rolling-Release Model, Powerful Customization, and a Legendary Learning Curve That Makes You Build the System Your Way 🐧💻 | Arch Linux, Linux, Customization, Open Source, Operating Systems #ArchLinux #Linux #LinuxDistro #TechExplained #OpenSource

vallarine99

10,300 views • 2 months ago

Eskom has scrapped the requirement for an engineer to sign off on the systems. Rooftop solar users are now only required to have their systems approved by professionals registered with the Labour Department. These include Installation Electricians and Master Installation Electricians. #DStv403 #DStv194 #TheSouthAfricanMorning #QuestionThinkAct

Eskom has scrapped the requirement for an engineer to sign off on the systems. Rooftop solar users are now only required to have their systems approved by professionals registered with the Labour Department. These include Installation Electricians and Master Installation Electricians. #DStv403 #DStv194 #TheSouthAfricanMorning #QuestionThinkAct

eNCA

62,703 views • 1 year ago

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

47,567 views • 4 months ago