← Wednesday, October 21, 2026SecurityVulnerability

Eight eMudhra intermediate CA private keys are reported compromised

emudhra.we-have-a-problem.com 4 min read Editor score 8/10

The report says eight intermediate CA keys chain to roots trusted by major browser and operating-system programs, and lists certificate blocking actions. Engineers responsible for trust stores and certificate operations should understand the scope and response.

What

Eight eMudhra intermediate CA private keys were compromised; they chain to roots trusted by major root programs and downstream stores.

How

The reporter demonstrated access by signing a message with each key; root programs blocked the certificates and the CA revoked the intermediates.

Why it matters

Compromised keys could impersonate websites or services, while clients that do not consume revocation data need software updates.

Read on emudhra.we-have-a-problem.com → Hacker News · 368 comments

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.