Cloudflare One Client Patches eMudhra Certificate Compromise

// 1h agoSECURITY INCIDENT

Cloudflare One Client Patches eMudhra Certificate Compromise

Cloudflare updated the One Client, WARP, 1.1.1.1, and cloudflared after eight compromised eMudhra intermediate certificates enabled forged-domain attacks. Developers should update clients, redeploy cloudflared, and review mTLS and strict-origin trust settings.

// ANALYSIS

This incident exposes how certificate trust failures can spread across endpoint software, tunnels, runtimes, and infrastructure faster than teams can patch them.

–Cloudflare’s fixes target certificate trust, not a weakness in TLS encryption itself.
–Updating an SDK may not be enough when verification happens in an HTTP library, runtime, operating system, or custom trust store.
–Cloudflare One Client users should update to the platform-specific fixed versions; cloudflared deployments require version 2026.10.2 or later.
–Teams using mTLS, Full (strict), or custom origin certificates must audit their configured CAs rather than assume Cloudflare’s mitigation covers customer-managed trust paths.

// TAGS

cloudflare-one-clientsecuritycloudcliself-hosted

DISCOVERED

1h ago

2026-10-22

PUBLISHED

1h ago

2026-10-22

RELEVANCE

7/ 10

AUTHOR

Better Stack

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

LAUNCH1h ago

Grok for Startups Offers Shared Credits

xAI’s startup program gives approved companies one promotional credit balance usable across Grok, Grok Build, Grok Bot, and Grok API. Credit amounts are determined case by case based on factors including funding, revenue, AI spend, traction, team size, and intended use, with credits generally expiring after six months. [Official program terms](https://x.ai/legal/startup-program-terms)

SECURITY1h ago

certifi 2026.10.19 Fixes eMudhra Trust Risk

certifi 2026.10.19 removes trust in the affected emSign root while restoring unaffected emSign roots. Python applications using requests, urllib3, pip, or bundled certifi stores should upgrade to prevent potential TLS man-in-the-middle attacks.

UPDATE1h ago

T3 Code v0.1.2 hardens runtime, adds Mermaid chat

T3 Code v0.1.2 adds Mermaid diagram rendering in chat through Pele and introduces new `t3 thread` CLI commands. More importantly, it updates Electron and Node.js to mitigate compromised eMudhra CA keys and other high-severity vulnerabilities.