TBNTech
The Internet goes on high alert after discovery of 8 compromised TLS certs
Publication: Ars Technica - All content
Author: Dan Goodin
Source published: 20/10/2026, 19:47:35 UTC
Briefing created: 20/10/2026, 21:33:53 UTC
Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 20/10/2026, 21:13:24 UTC.
Briefings
Eight intermediate TLS certificates issued by India-based eMudhra Limited were compromised, allowing anyone to mint trusted credentials for any site. As of late morning Tuesday, major browsers and apps blocked these keys, but the threat persists due to the difficulty of updating other Internet components like Linux distributions and IoT devices. An informal advisory from eMudhra stated 'We have a problem here - Wayne.'
Key points
- Eight intermediate TLS certificates issued by eMudhra Limited were compromised, enabling anyone to mint trusted credentials for any site on the Internet.
- Major browsers and apps blocked all eight compromised intermediate certificates as of late morning Tuesday, but the threat remains active due to the difficulty of updating other Internet components.
Context
This incident involves eight intermediate TLS certificates from eMudhra Limited, a certificate authority based in India. The compromised keys allow unauthorized sites to be trusted globally, requiring immediate action from major tech providers.
Limitations
No certificate transparency logs were available to track the issuance of these compromised keys. The threat is ongoing because updating other Internet components like Linux distributions and IoT devices is difficult and time-consuming.
Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 20/10/2026, 21:33:53 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.
View archived briefing on IPFS
bafybeiawtfzwz3jsxvmanb2pbrj2v2dt6ad75ll4qm76zlmnupce2sncqm