Mozilla, Google, Apple block compromised eMudhra CA certificates
eMudhra revoked eight intermediate certificates after researchers discovered their private keys were weak enough to be recovered instantly, allowing forged trusted certificates. Mozilla, Google, Apple, the Go project and others blocked the affected certificates on October 20, prompting a massive clean‑up across browsers and software.
Why it matters: Compromised CA keys can let attackers impersonate any website, undermining web security for developers and users.
Read the coverage
BleepingComputerMozilla, Google, Apple block compromised eMudhra CA certificates ↗bleepingcomputer.com · 4h ago
The Hacker NewsEight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software ↗thehackernews.com · 12h ago
Dark ReadingTech Giants Block eMudhra Certificates Tied to 8 Compromised Keys ↗darkreading.com · 7h ago
The RegisterIndian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’ ↗theregister.com · 6h ago
This story so far
How it developed, day by day.
Friday 23 October
eMudhra exits certificate business after private key flawThursday 22 October
Eight eMudhra Intermediate CA Private Keys Compromised, Browsers Block ThemWednesday 21 October
Mozilla, Google, Apple block compromised eMudhra CA certificates (this page)
More in Security
Security16h ago3 sources
