Apple is pulling faulty eMudhra website certificates from the Mac tools used in Terminal. Most people are already protected, but command-line users should act.
Apple is fixing a security gap on the Mac that only affects people who type commands into Terminal. The first macOS 27.3 developer beta removes compromised website certificates from the list that command-line tools trust. Everyone else was already covered.
A certificate is a digital ID that helps your computer confirm a website is the real one. Last month, a security researcher found that the private keys behind eight certificates from the Indian company eMudhra were weak. Attackers could have used them to impersonate legitimate websites and reach sensitive information. So far, there is no evidence anyone did.
Apple says it has blocked these certificates since October 19 in Safari, Mail and other apps that use its networking and security tools. That covers all of its software platforms. The block happened automatically, with no update needed. If you never use Terminal, you are fully protected.
Command-line users have two options, laid out in the alert box above. Wait for the update, or remove the certificates by hand using Apple's support document. The manual route means editing the /etc/ssl/cert.pem file.
macOS 27.3 is not expected to reach the public until December. A macOS 27.2.1 update with the same fix will likely arrive sooner. Apple has not given a date in the material available, so the exact timing is unknown.
If you use Terminal on a Mac, install macOS 27.2.1 when it arrives or remove the certificates by hand. Everyone else needs to do nothing.
Voters in Upper Sandusky, Ohio, banned large data centers after a $900 million plan. Here is how a town of 6,600 did it, and what other places can learn.
Read more: Small Ohio town votes to ban a $900 million AI data centerIn a hand-counted 4,500-step walk, the $180 Fitbit Edge was off by 8 steps and the $800 Apple Watch Ultra 4 by 51. Both did the job well.
Read more: A $180 Fitbit counted steps more closely than an $800 Apple WatchEA has re-released 25 classic PC games at a discount until November 19, and Bethesda has finally given The Elder Scrolls VI a subtitle: Sentinel.
Read more: EA brings 25 classic PC games back, and Elder Scrolls VI gets a name
