EMudhra Intermediate CA Certificates Compromised

Eight intermediate certificate authority (CA) private keys belonging to Indian CA eMudhra Limited were compromised due to a cryptographic defect during certificate generation, where insufficient randomness allowed attackers to derive private keys from public certificates. This enables threat actors to sign unauthorized TLS certificates and conduct man-in-the-middle (MitM) attacks, such as traffic interception, impersonation, or session hijacking. Major browser and OS vendors have taken action to revoke or untrust the affected intermediate CAs, and eMudhra has revoked the eight compromised certificates. Organizations are advised to audit PKI assets, reissue certificates, update trust stores, and monitor for MitM activity to mitigate risks.

AI-extracted · verify before operational use