Apple Blocked a Security Threat That Could Make Fake Websites Look Real, but Some Mac Users May Still Be Exposed to the Risk

Apple has blocked eight security certificates issued by Indian certificate authority eMudhra after researchers found weaknesses that could let attackers impersonate legitimate websites.

The affected certificates used dangerously weak cryptographic keys, raising concerns that someone could exploit them to intercept encrypted connections or steal sensitive information.

There’s no evidence that attackers actually exploited the vulnerability, but the potential risk was serious enough for Apple and other major browser makers to take action.

Also: Apple called rival foldables “cheap and crappy,” but cracked iPhone Duo screens are a hard pill to swallow at $1,999

Apple Has Already Blocked the Certificates

According to Apple’s security guidance, the company began blocking the affected eMudhra TLS certificates on October 19.

The protection applies to Safari, Mail, and other apps that rely on Apple’s built-in networking and security frameworks.

More importantly, you don’t need to install a software update or change any settings. The certificates are blocked automatically, meaning most iPhone, iPad, and Mac users are already protected.

Google, Microsoft, and Mozilla have also taken action to block the affected certificates in Chrome, Edge, and Firefox.

The coordinated response helps prevent browsers from trusting certificates that could potentially be abused to impersonate legitimate websites.

Also: The most frustrating thing about Safari on the $1,999 iPhone duo is the screen space you paid for but can’t actually use

Some Mac Users Still Need to Take Precautions

There’s one exception involving macOS command-line tools commonly used by developers and IT administrators.

Unlike Safari and other apps that rely on Apple’s security frameworks, some command-line utilities use a separate certificate file that hasn’t yet been updated.

As a result, those tools may continue trusting the affected certificates until Apple releases a dedicated macOS update.

The company hasn’t announced when that fix will arrive.

In the meantime, Apple recommends that affected users manually remove the relevant certificate entries from:

/etc/ssl/cert.pem

This file contains trusted certificate authority information used by certain command-line tools.

However, manually modifying system certificate files can disrupt secure connections if done incorrectly.

Anyone unfamiliar with the process should consult Apple’s technical instructions or their IT administrator before making changes.