medium technology

Google, Mozilla, Apple and Go project block eMudhra certificates tied to 8 compromised keys

1 fonte(s) · 1 atualização(ões) · publicado 20/10/2026 18:45 · coletado há 1 hora

Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗

Google, Mozilla, Apple, the Go project and other organizations moved quickly to block certificates issued by the Indian certificate authority eMudhra. The certificates are tied to 8 compromised keys. It is unclear how the keys were compromised. The source text available is limited to the headline and a short summary, so the scope of the affected certificates and any abuse are not stated.

Technical Details

Eight keys associated with eMudhra certificates were compromised; the method of compromise has not been established.
Trust-store operators blocked the affected certificates, limiting their usability for TLS and other trust decisions.
No CVEs, IOCs, threat actors or confirmed abuse are named in the available text.

Remediation

Ensure browsers, operating systems and Go toolchains are updated so the distrust and block entries apply.
Inventory any certificates issued by eMudhra in your environment and plan for reissuance from a trusted CA if they are affected.

Linha do tempo

darkreading.com ↗ · pub. 20/10/2026 18:45 · coletado 20/10 20:00 primeiro registro só resumo do feed

Google, Mozilla, Apple and Go project block eMudhra certificates tied to 8 compromised keys
ler a análise desta fonte ocultar
Google, Mozilla, Apple, the Go project and other organizations moved quickly to block certificates issued by the Indian certificate authority eMudhra. The certificates are tied to 8 compromised keys. It is unclear how the keys were compromised. The source text available is limited to the headline and a short summary, so the scope of the affected certificates and any abuse are not stated.

Technical Details
- Eight keys associated with eMudhra certificates were compromised; the method of compromise has not been established.
- Trust-store operators blocked the affected certificates, limiting their usability for TLS and other trust decisions.
- No CVEs, IOCs, threat actors or confirmed abuse are named in the available text.
Remediation
- Ensure browsers, operating systems and Go toolchains are updated so the distrust and block entries apply.
- Inventory any certificates issued by eMudhra in your environment and plan for reissuance from a trusted CA if they are affected.