Threat Pulse 62High
eMudhra CA keys trivially weak since 2025; Chrome and Firefox block eight intermediates
Severity 6MitigatedconfirmedEncryption and certificates

A researcher found that eight eMudhra intermediate certificates (six TLS, two code signing) used P-384 private keys with values below 256, so anyone could recompute them. Chrome received the report at 18:05 UTC and pushed a CRLSet block by 19:45; Mozilla blocked via OneCRL by 22:59 the same day. No rogue certificates were found in CT logs, but any software with its own trust store needs updates.

What to do: Browsers blocked October 17; Apple October 22; Microsoft, Go, Node and Python trust stores updated; eMudhra reportedly exiting TLS CA business. Oct 25: India's CERT-In issued an advisory titled "Compromise of eMudhra Intermediate CA Certificates", calling it a compromise rather than weak keys. Oct 27: Microsoft shipped out-of-band Windows updates to distrust eMudhra certificates.

· 18 days ago · eight intermediate CA certificates trusted by all major root programs · The Hacker News
SourcesThe Hacker NewsBleepingComputerHelp Net SecurityDark Readingportfolio.shenthar.mebleepingcomputer.com
On X
@IndianCERTverifiedOct 21, 15:45 UTC

CERT-In has published Advisory on its website. Compromise of eMudhra Intermediate CA Certificates https://t.co/gixbWR83Vf

Open on X
@BleepinComputerverifiedOct 27, 18:20 UTC

Microsoft releases Windows OOB updates to distrust eMudhra certificates

Open on X
Why this score

Web-wide trust infrastructure (impact 4), keys recoverable by anyone but no misuse found (exploitability 1), PKI underpinning finance and government (criticality 1).

Back to the board

Updated Nov 5, 01:45 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.