Back to Blog
Insights

Certificate Security Concerns, New Edge AI Chips, and Aqara's Matter Outdoor Plug

This week's industry roundup covers the eMudhra intermediate CA private key security incident, Synaptics' Astra SR200 edge AI processors, and Aqara's Matter-compatible outdoor plug. Other updates include matter.js support for Matter 1.6.1, industrial security monitoring, post-quantum firmware protection, and smart metering.

Product Line
Cross-Product Line
Topic
Industry Insights
Published
2026-10-23
Read Time
10
min read

This week (October 17–23, 2026), a certificate key security issue involving eMudhra drew attention across the security industry. Synaptics introduced new AI chips for cameras and wearables, while Aqara launched a Matter-compatible outdoor smart plug. Matter development tools also received updates, and industrial device manufacturers continued to strengthen firmware protection and runtime monitoring.

01 | Eight Intermediate CA Private Keys Recoverable in eMudhra Incident

According to an incident report published by Mozilla, the private keys associated with eight eMudhra intermediate CA certificates could be recovered. After researchers reported the issue on October 17, several browser root certificate programs participated in the investigation. eMudhra subsequently revoked the affected certificates. Read Incident Report

Intermediate CAs are responsible for issuing certificates. If their private keys can be obtained by unauthorized parties, the trust relationships underlying the affected certificates may be compromised, making it necessary to assess the scope of the impact promptly.

Although this incident involves a different certificate infrastructure from Matter device certificates, it offers lessons for device manufacturers. When choosing a certificate service provider, companies should look beyond pricing and delivery speed. They should also understand whether key generation has been properly validated, how security incidents are handled, and whether affected devices and production batches can be identified when credentials need to be replaced.

02 | Synaptics Introduces New AI Chips for On-Device Voice and Image Processing

On October 20, Synaptics introduced the Astra SR200 series, combining Arm processors with Google Research's Coral NPU. Designed for AI wearables, connected cameras, industrial vision, and voice applications, the series supports on-device multimodal AI and integrates features such as secure boot and hardware isolation. Read Original Article

For camera and wearable manufacturers, these chips offer more options for processing voice and image data locally, potentially reducing the amount of data sent to the cloud. The functions a device can actually support still depend on model size, memory, power consumption, and overall product design.

When evaluating a chip, manufacturers can start by defining the tasks the device needs to perform. Does it need to continuously recognize sounds, detect anomalies in video, or maintain basic functionality when offline? Testing against specific use cases is often more useful than comparing processing power specifications alone.

03 | Aqara Launches Matter Outdoor Plug with Thread and Zigbee Support

On October 20, Aqara introduced the Outdoor Plug H2 EU, supporting switchable Matter over Thread and Zigbee modes. With an IP44 protection rating, the plug is designed for gardens, patios, balconies, and similar outdoor spaces. Users can connect it to third-party Matter ecosystems through Thread or use Zigbee to integrate it into the Aqara ecosystem. Read Original Article

The product gives users a choice of connectivity options. Households already using Aqara products can continue with Zigbee, while those using other Matter platforms have another way to connect the device.

For manufacturers of smart plugs, lighting products, and controllers, multi-protocol products also require clear explanations of how each mode works. This includes which gateways are required, which features are supported, and how devices need to be recommissioned after switching modes. These details directly affect installation experience and after-sales support.

Industry Briefs

  • matter.js Updated for Matter 1.6.1. Released on October 20, matter.js 0.18.0 incorporates changes related to the latest specification, including controller interfaces and group communication. Matterbridge is already using this version in its development branch. This is a development tool update, not the release of a new Matter standard this week. Read Development Notes‍
  • Mitsubishi Electric Integrates Security Monitoring into Industrial Equipment. Announced on October 22, the solution uses Nozomi technology to provide USB monitoring, malware detection and isolation, and software management capabilities. Commercialization is planned for the fiscal year ending March 2028. Read Original Article‍
  • Infineon Brings Post-Quantum Firmware Verification to Industrial MCUs. Introduced on October 19, the PSOC Control C3 PSC3M/P6 series targets motor control and power conversion applications. It supports SHA-512 and LMS for secure boot and firmware update verification. The new products are now available. Read Original Article‍
  • Renesas Introduces RX74M and RX74N MCUs. On October 22, Renesas introduced two MCUs that bring 22nm process technology and embedded MRAM to the RX family for the first time. They offer operating frequencies of up to 600 MHz, along with enhanced industrial communication, hardware security, and post-quantum cryptography support. Read Original Article‍
  • Gateway Partner Selected for the Netherlands' Next-Generation Smart Metering Project. On October 20, Trilliant announced its participation in the NextGen project, developing and delivering gateways compliant with the DSMR6 metering architecture. The project supports an open architecture and interoperability between devices from different suppliers. Read Original Article

This Week's Takeaway

Beyond selecting new products and technologies, device manufacturers should address several practical questions early: How will certificate-related security issues be handled? Can edge AI meet actual application requirements? Which features are supported in different connectivity modes?

Addressing these details during testing, delivery documentation, and maintenance planning can help reduce rework after product launch.

Further Reading

How can device identities, digital certificates, and production configurations be linked during manufacturing? Learn more about Snowball Technology's secure factory provisioning solution‍

Snowball Team
Team Member
LinkedIn
Founded in 2013, committed to driving scalable and sustainable industry growth through a trusted, future-ready security infrastructure. Snowball Technology’s core team comes from NXP’s security services group, bringing over a decade of experience in device security. The company currently has more than 100 employees, with over two-thirds in R&D. Snowball Technology is certified under international standards including ISO 9001, ISO 14001, and ISO 27001.