eMudhra Intermediate CA Compromise
7.4 relevance
Score Breakdown
technical depth 8
novelty 8
actionability 7
community 6
strategic 8
personal 6
Scored daily by a customisable AI persona to surface the most relevant engineering leadership news.
Critical CA compromise with technical details, important for security but not core interest.
Summary
Private keys for eight eMudhra intermediate CA certificates have been compromised, allowing attackers to forge certificates for any site. The keys were revealed due to low entropy, not through a known breach. Browsers blocked them using revocation lists, but other software had to remove the emSign ECC G3 root. Unpatched systems remain exposed to forged certificates, including client auth and mTLS. By Chris Swan