008 - eMudhra Certificate Compromise, AI Vulnerability Hunting, and Elixir 1.20.5

The eMudhra root certificates were compromised, and we cover how to check whether your Elixir app is affected. Elixir 1.20.5 fixes three CVEs, and we also look at Expert LSP 0.2, Cure, Popcorn 1.0, and Ash's Temporal Resources and Signals. Michael Lubas from Paraxial.io joins us for a discussion on cybersecurity in Elixir.

NEWS

1. eMudhra certificates compromised
   1. https://com.erlef.org/wg/sec/2026/10/20/root-certs-compromised.html
   2. https://paraxial.io/blog/emudhra-ca
   3. https://bob.hex.pm/docker
   4. https://emudhra.we-have-a-problem.com/apple.html
2. Elixir 1.20.5 released
   1. https://github.com/elixir-lang/elixir/releases/tag/v1.20.5
3. Security Question of the Week
4. Expert LSP 0.2 released
   1. https://expert-lsp.org/expert-v0.2-is-out/
   2. https://github.com/remoteoss/dexter
   3. https://elixirforum.com/t/dexter-a-fast-full-featured-elixir-lsp-optimized-for-large-codebases/74963
5. Cure - A new BEAM language
   1. https://cure-lang.org/
   2. https://elixirforum.com/t/cure-a-new-language-compiled-to-beam/73151
   3. https://github.com/josevalim/lynx

BLOGS

1. Johanna Larsson: The time Bluesky tried to kill my server
   1. https://jola.dev/posts/the-time-bluesky-tried-to-kill-my-server
2. Ash: Introducing Temporal Resources
   1. https://ash-hq.org/blog/introducing-temporal-resources/
3. Ash: Introducing Signals
   1. https://ash-hq.org/blog/introducing-signals/
4. Software Mansion: Popcorn 1.0 moving from AtomVM to OTP Beam
   1. https://swmansion.com/blog/popcorn-1-0-moving-from-atom-vm-to-otp-beam/
   2. https://elixirforum.com/t/popcorn-v1-0-is-out-and-runs-on-the-beam/77188
5. Oban: Monitoring Oban Health
   1. https://oban.pro/articles/monitoring-oban-health
6. Nelson Vides: Making DNS erlang fast
   1. https://blog.dnsimple.com/2026/10/making-dns-erlang-fast
   2. https://www.erlang-in-anger.com/

CONFERENCES

1. November Nerves Meetup - November 11 @ 19h CET
   1. https://nervesmeetup.eu/meetup/harald-ringvold-Armex-building-a-disc-ripping-appliance
2. CFP ElixirConf EU is open until December 15
   1. https://sessionize.com/elixirconf-eu-2027/
3. BEAM room at FOSDEM - Saturday, Jan 30, 2027 (Brussels)
   1. https://beam-fosdem.dev
4. BobKonf CFP ends tomorrow (2nd Nov)
   1. https://bobkonf.de/2027/en/cfc.html