🤖 Eight eMudhra intermediate CA private keys are compromised, confirmed by Mozilla and Chrome Root Program. Whoever holds one can mint browser-trusted certs for any domain. Google, Mozilla, Apple and the Go project are blocking them; how the keys leaked is still unknown.
🔗 https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html
#PKI #TLS #InfoSec #CyberSec
The Hacker NewsEight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and SoftwareEight eMudhra CA keys were compromised, prompting browser blocks and software fixes. Chrome found no rogue certificates in CT logs.