AI
eMudhra Intermediate CA Compromise
Publication: Simon Willison's Weblog
Author: Not available in collected metadata
Source published: 20/10/2026, 23:50:25 UTC
Briefing created: 25/10/2026, 04:30:07 UTC
Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 22/10/2026, 15:42:25 UTC.
Briefings
Eight eMudhra intermediate CA certificates have been compromised, affecting software that relies on Mozilla, Microsoft, Apple, and Chrome trusted roots. Affected packages include Linux distro CA-certificates and Python dependencies such as uv, pip, and certifi. The site tracks updates via a GitHub repository, noting that affected software must be updated to prevent reliance on compromised certificates.
Key points
- Eight eMudhra intermediate CA certificates were compromised, affecting software that bundles trusted certificates from Mozilla, Microsoft, Apple, and Chrome.
- Affected packages include Linux distro CA-certificates and Python dependencies like uv, pip, and certifi, requiring updates to prevent reliance on compromised certificates.
Context
The eMudra Intermediate CA Compromise is a security event where eight intermediate CA certificates were compromised, affecting software that relies on trusted roots from major operating system providers. This incident impacts Linux distro CA-certificates and Python dependencies, requiring updates to prevent reliance on compromised certificates.
Limitations
Evidence covers only eight compromised certificates and specific affected packages; no impact on end-users or specific software versions beyond those explicitly mentioned is documented.
Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 25/10/2026, 04:30:07 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.
View archived briefing on IPFS
bafybeidp52a7df2gs2j344et2kqrsv6vgeecr67m7irbjv4yym7xmba2fa