suspectedhighSupply chainFirst reported Oct 17, 2026 · Updated Oct 20, 2026
eMudhra: private keys of eight intermediate CAs compromised, certificates revoked
Google and Mozilla said private keys for eight intermediate certificate authorities operated by Indian digital trust provider eMudhra were compromised, potentially enabling attackers to forge trusted certificates and impersonate websites or services. Mozilla stated it received a report forwarded by the Chrome Root program on 17 October at 20:06 UTC, and the intermediates were revoked.
Members only
The full record: the timeline (1 update) and 7 linked reports
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment eMudhra — or anything else you track — is hit again
A free account is all it takes — no card, one minute.