Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys

October 20, 2026 · 11:32 am 4 sources

Image: Dark Reading

Coverage

Coverage

• Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
  Dark Reading · October 20, 2026 21:45
  Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised.
• Mozilla, Google, Apple block compromised eMudhra CA certificates
  BleepingComputer · October 21, 2026 00:46
  Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites. [...]

More coverage

• Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
  The Hacker News · October 20, 2026 11:32
  Go 1.27.3 and Go 1.26.10, released on October 20, make Go's certificate verifier reject any certificate chain that passes through one of eight intermediate certificate authority keys. Programs built on the new release will refuse connections to sites and services whose certificates were issued…
• Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
  The Hacker News · October 20, 2026 17:09
  The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate…