10/21/2026
Security notice for our integrator and customer partners
Today it was publicly disclosed that some signing keys at a certificate authority, eMudhra, were weak enough to recover. With them, an attacker can make a fake website or "verified" software that passes as legitimate on systems that haven't been updated.
Current Chrome and Firefox already block the affected certificates. The exposure is in older software and in devices whose trusted-certificate lists don't update often, which includes many NVRs, cameras, access panels and routers in the field.
What we recommend now:
- Update browsers, operating systems and phones, and restart them.
- Check NVR, camera, access control and router firmware for updates, and recheck over the coming weeks. Flag devices that no longer receive updates.
- Don't click through certificate or security warnings. Stop and report them.
- On Windows, treat a "verified publisher" label on unexpected software with caution for now. Microsoft hasn't confirmed its fix. Install only from the manufacturer's official site.
We checked IP Powerhouse's websites and the key services we rely on and found none of the affected certificates.
Questions about a specific product or firmware version? Contact our team.
