@ffarooqb

Kashmiri in 🇸🇬 … Application/API Security Architect… Travel, Food, F1 and Aviation interests me… When life throws me a virus, I throw it back harder…

 Singapore
Joined July 2017
  • Tweets11.4K
  • Following198
  • Followers263
2.8KMedia
Not just a mosque, but a legacy of faith, patience, and promise. Masjid Al-Aqsa. Alhamdulillah…
9
1,542
Fouad Farooq retweeted
sysxplore
@sysxplore8h
10
150
11
2,878
34,642
Fouad Farooq retweeted
Fahad Shah
@pzfahad7h
The Palestinian ambassador speaks about genocide of Palestinians and reminds people of the history, the reality of terror, and the global support for genocide.
11
1
69
2,238
Neki kar, media pe daal…
Rising Kashmir
@RisingKashmirOct 23
#Watch : SSP Traffic City Sgr Bisma Qazi leads a massive drive at Rajbagh Srinagar against traffic rules violations. She also counselled minors and urged their parents to keep watch on their wards so that precious lives are saved. Reports: Abid Bashir Camera and Edit: Musiab Fayaz @SSPTFCSGR @Traffic_hqrs
43
Fouad Farooq retweeted
saka🇲🇾@saka___klOct 23
シンガポールの納税処理ミスったら、Travel Restriction Order くらった😆
10
11
6
211
44,294
Fouad Farooq retweeted
Paula@checkeredflaskOct 22
His McLaren stats alone are better than some drivers’ entire careers. Sit this one out
MV@mvxsevenOct 21
Just imagined Lewis Hamilton’s career without Mercedes and rocketships. 😂😂
12
111
2
1,441
32,050
Hey @HDFC_Bank , if I have not taken a loan yet on the credit card, why do you draft the SMS in a way to scare me that I have already taken one. You can do better. Though you are not the only bank to do so in India…
1
111
Fouad Farooq retweeted
Ball Zone
@TheBallZoneXOct 22
🚨 France Football didnt disclose the Ballon Dor of All Time as a "non official trophy" when they posted the voting However, AFTER 5 DAYS, they decided to call it a "non official trophy" when the results didn't go as expected 💔
305
2,930
101
25,318
356,090
Fouad Farooq retweeted
Baller HQ
@FootballerHQOct 22
🚨 Lewandowski lost the Bdor in 2021 to Messi coz this Journalist believed "he didn't win anything with Germany" 🤷‍♂️
35
423
36
9,902
509,339
Fouad Farooq retweeted
Punit Pania@Punit_PaniaOct 22
After making the entire country dance around for KYCs and SIRs their security keys are 4 and 56. Never has such dizzyingly high incompetence married zero accountability on such a large scale. Motherland for a reason ⚡
Sandeep Srinivasa
@sandeepssrinOct 22
eMudhra is so bad that Cloudflare CEO had to tweet and release advisory.
16
449
9
2,408
27,175
Fouad Farooq retweeted
Bhavesh Chaudhari
@bhaveyxOct 22
Mozilla updated their blog on the eMudhra CA compromise, super efficient way of communicating the whole incident
2
39
2
1,385
59,827
Fouad Farooq retweeted
Sam Jarman@samjarmanOct 22
43
2,364
75
30,691
281,999
Fouad Farooq retweeted
Complex
@ComplexOct 22
Lewis Hamilton closed out his driver press conference at the F1 United States Grand Prix with a message of solidarity: ‘Free Congo, free Sudan, free Syria, free Palestine.’ [via/ GettyImages]
114
667
66
5,362
78,903
Impossible standards? Seriously?
Eztainutlacatl
@cbkwglOct 22
Now people should celebrate. An Indian company exits SSL/TLS business. Your witch-hunt and demand for impossible standards has worked.
Readers added context they thought people might want to know
Generating private keys with more than 3 digits for a world-trusted root certificate authority are not impossible standards. Badly generated keys may endanger - and have - the whole internet by breaking the most important encryption protocol. theregister.com/security/2026/… cloudflare.com/learning/ssl/w…
48
Fouad Farooq retweeted
Shashikant Kore
@kshashiOct 21
How eMudhra comes up with its private keys -
International Cyber Digest
@IntCyberDigestOct 20
‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours. Each key should be a 116-digit number, but one was just 4. Anyone can guess them and forge HTTPS certs for any website.
15
62
4
637
34,482
Fouad Farooq retweeted
Mehul Mohan
@mehulmptOct 21
There's nothing to "fear monger". Everyone big in the industry has revoked the 8 intermediate certificates already. Mozilla has permanently removed emSign Root CA G3 from its software. Google will remove it permanently too in the next few days. Reputation damage is done. The world has mostly "fixed" this mess eMudhra has created and has permanently stopped using one of the very few Indian Certificate Authorities trusted globally.
Ministry of Electronics & IT
@GoI_MeitYOct 21
Replying to @GoI_MeitY
However, some social media accounts are indulging in fear mongering about the impact of this incident. The facts of the case are as follows: eMudhra operates in two distinct areas:
55
310
6
4,414
171,366
eMudhra is a joke…
daksh
@daksh0xOct 21
banger tshirt idea
1
48
Fouad Farooq retweeted
Juampi
@juampitechOct 21
October has been an absolute nightmare for software > Railway - customer secrets exposure > LiteLLM - malicious PyPI + Docker releases > Zeabur - infrastructure breached > OpenCode - AI API keys exposed > OVHcloud CLI - official binaries backdoored > Rank Math PRO - malware in official plugin > TeamUpdraft - customer data compromised > ConnectWise - cloud backup identities compromised > Tensorlake - npm package infected > SubQuery - backdoored npm package > GhostAction - GitHub repos with malicious workflows > PHP - critical RCE vulnerabilities > Node.js - security vulnerabilities patched > eMudhra - certificate authority keys compromised > Tailscale - eMudhra incident At this point, the biggest security risk might not be the code we write, but the code we trust...
179
841
280
5,104
568,810
Fouad Farooq retweeted
Akamai Technologies@AkamaiOct 21
Are you aware of the critical RCE vulnerabilities CVE-2026-109618 and CVE-2026-109619 that are affecting PHP core products? Our customers are already safeguarded.
Akamai Security Intelligence Group@akamai_researchOct 21
Akamai Releases Protections for Critical Remote Code Execution Vulnerabilities in PHP Core Full Write-Up: ow.ly/PNPj50ZZIoZ

Critical Remote Code Execution Vulnerabilities in PHP Core | Akamai

Read about CVE-2026-109618 and CVE-2026-109619, two critical RCE vulnerabilities affecting PHP core products. Akamai customers are protected.

akamai.com
1
2
1
22
2,586
🚨 UPDATE: India has launched a special investigation into eMudhra after 8 intermediate CA private keys were found trivially recoverable. CERT-In and Red Hat have issued fresh security alerts as the fallout extends beyond Chrome, Firefox, and Go. Read - thehackernews.com/2026/10/ei…
16
146
19
591
57,064
Fouad Farooq retweeted
Troy Hunt
@troyhuntOct 21
The important thing with incidents like @eMudhra is to proceed openly and by engaging with the communit… ah crap
eMudhra
@eMudhraOct 21
Global TLS Intermediate CA incident: We’ve updated our incident page with how it happened, who is affected (one US customer ecosystem), what’s not affected, and what we’re putting in place. We will publish the root cause once our investigation is complete. 👉emudhra.com/en/post/certific…

eMudhra Statement on Recent Certificate Security Incident

eMudhra’s statement on a security incident involving a specific set of intermediate CA certificates, with updates as the investigation progresses.

emudhra.com
Readers added context they thought people might want to know
eMudhra minimizes the scope by claiming only "one US customer ecosystem" is affected. In reality, 8 of its CA certificates had catastrophically weak private keys (one being simply the number 4), allowing anyone to forge trusted HTTPS certificates for any website on the internet.blog.google/security/prote…
22
64
3
1,050
31,565
Load more