[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

3 clusters · 48 sources · 3 days · First seen · Last updated

eMudhra certificate authority security compromise

Overview

Security researchers discovered that eight intermediate certificates issued by the Indian certificate authority eMudhra were compromised due to extremely weak P-384 elliptic-curve private keys. The keys were found to be integers smaller than 256 rather than large random numbers, allowing attackers to recalculate them almost instantly to forge certificates and impersonate servers.

Major technology companies responded by blocking the affected certificates. Google, Apple, Microsoft, and Mozilla implemented various mitigation steps between October 17 and October 20. Mozilla also moved to remove the eMudhra root from its trust store. Mozilla released Firefox 158.0.1 to bundle the revocation directly into the browser, and Zen Browser released version 1.23.4b to incorporate similar protections.

While web browsers have largely mitigated the risk, experts warn that software environments such as Python, Node.js, and Go, as well as IoT devices, may remain vulnerable because they often rely on static trust stores without real-time revocation checks. Blockchain security firm CertiK specifically noted that cryptocurrency trading bots and exchange-linked applications may be at risk of traffic interception.

eMudhra has attributed the vulnerability to a bug in a key configuration script used during a ceremony in April 2025, noting that the incident involved human error during the packaging process. In response, the Indian Ministry of Electronics and Information Technology has formed a special team to investigate the incident, though it clarified that regulated digital signature services in India remain unaffected. Following the news, eMudhra’s shares experienced a significant decline.

In a major strategic shift following the incident, eMudhra announced its decision to exit the global SSL/TLS certificate market, citing high operational complexity, rising compliance costs, and declining commercial viability due to competition from free certificate providers.

Entities

Mozilla · eMudhra · Google · Microsoft · Apple

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. [TECHNOLOGY] 16 sources
    eMudhra exits global SSL/TLS certificate business after security flaw

    eMudhra is exiting the global SSL/TLS certificate business after discovering eight intermediate certificates with trivially recoverable private keys, prompting blocks by major browser vendors.

  2. [TECHNOLOGY] 2 sources
    Mozilla and Zen Browser release security updates for eMudhra certificate compromise

    Mozilla and Zen Browser have issued critical security updates to protect users against a certificate authority compromise by eMudhra that could allow attackers to impersonate websites.

  3. [TECHNOLOGY] 34 sources
    eMudhra certificate flaw triggers global security response

    Weak private keys in eight eMudhra intermediate certificates have forced Google, Apple, and Mozilla to issue emergency blocks to prevent website impersonation and traffic interception.

Sources

9to5mac.com · administrator.de · analyticsindiamag.com · arstechnica.com · bhaskarlive.in · blocktempo.com · cointelegraph.com · computerbase.de · cryptobreaking.com · csoonline.com.au · cybernoz.com · cyberscoop.com · cybersecuritydive.com · dev.to · devdiscourse.com · disa.org · drweb.de · dtnext.in · eenewseurope.com · encryptionconsulting.com · finance.technews.tw · fosslinux.com · gentoo.org · gigazine.net · gulfnews.com · inc42.com · ithome.com · itnews.com.au · itshow.com.br · linuxcompatible.org · neetbulletin.in · news18.com · newsable.asianetnews.com · newsbytesapp.com · omgubuntu.co.uk · osnews.pl · readme.lk · routerjockey.com · scotthelme.co.uk · somosjujuy.com.ar · spacemoney.com.br · tennews.in · thefederal.com · thehackernews.com · timesnownews.com · tr.euronews.com · tradebrains.in · ubuntulinux.org

This summary has been updated 5 times: see revision history