Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software — SkimNews

Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- eMudhra had eight intermediate certificate authority (CA) private keys compromised, confirmed by Mozilla and Google's Chrome Root Program on October 20.
- Because the compromised keys let holders issue fraudulent certificates for any website, browsers and software products have rolled out emergency updates to block and replace the affected certificates.
Why it matters: The compromise of eight eMudhra intermediate CA keys — confirmed by Mozilla and Google on October 20 — means any website signed through those certificates could be impersonated until the keys are fully distrusted, forcing rushed emergency updates across every browser and software product that trusted eMudhra's chain.
Ask SkimNews




