MacOS 27.3 developer beta drops with eMudhra certificate removal — public release expected in December, but a smaller patch may land sooner. The update strips eight compromised intermediate certificates from /etc/ssl/cert.pem, blocking their use by command-line tools like curl, wget, and openssl on macOS systems. These certs belong to Indian CA eMudhra, whose private cryptographic keys were found weak last month, a flaw that could let attackers spoof trusted websites.

No confirmed exploitation has been reported. Apple says it’s already blocked the same certs in Safari, Mail, and other apps using its networking stack since October 19, no update needed for those users. If you don’t run CLI tools, you’re unaffected. For those who do, Apple offers manual removal instructions via its support doc, but the safer path is waiting for macOS 27.2.1 or 27.3.

Neither version is live for consumers yet: 27.3 remains in developer beta, and Apple hasn’t confirmed a date for 27.2.1 beyond “sooner”. The fix applies globally, no regional pricing or launch windows, because it’s not a product launch. It’s a patch. And it’s urgent only for developers, sysadmins, and power users relying on terminal-based network calls.

The rest of us? Already protected.