Tech
eMudhra Intermediate CA compromise
Publication: LWN.net
Author: jzb
Source published: 20/10/2026, 14:56:23 UTC
Briefing created: 20/10/2026, 15:52:36 UTC
Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 20/10/2026, 15:50:24 UTC.
Briefings
Mozilla reported that eight eMudhra intermediate certificates were compromised, triggering immediate blocking across major browsers and operating systems. The affected certificates were revoked via Mozilla's OneCRL list and updated in NSS 3.131.1. Blocking occurred on October 17 for Chrome, October 19 for Apple devices, and October 20 for Microsoft. The NetBSD foundation also issued instructions to block these certificates on their platform.
Key points
- Mozilla blocked eight eMudhra intermediate certificates using OneCRL and updated NSS 3.131.1.
- Chrome blocked the certificates on October 17, Apple on October 19, and Microsoft on October 20.
Context
This incident represents a significant certificate compromise affecting eMudra infrastructure, requiring immediate remediation across major browsers and operating systems to prevent potential security risks.
Limitations
Evidence covers only the initial blocking actions taken by Mozilla and the NetBSD foundation. Specific details on the scope of the compromise, the number of affected users, or the specific nature of the compromise remain unverified.
Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 20/10/2026, 15:52:36 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.
View archived briefing on IPFS
bafybeiejcdm7c6rqctits67aq55g4cpat5gpbdghdlmzlg7tcilgwj4mve