← Azimuth Daily
Capturing data…
Capturing data…
THU, 22 OCT · 89 ITEMS
Hacker News, The Register, Simon Willison · AI & Technology
3 outletseMudhra, an Indian certificate authority (CA), has disclosed that private keys for one of its intermediate CAs were compromised. Because eMudhra's root certificates are trusted by major browser and operating system (e.g., Microsoft, Apple, Google, Mozilla), the exposure enables an attacker to issue fraudulent TLS certificates that would be automatically trusted by most devices and browsers. The disclosure likely originates from eMudhra or a root program incident report.
This is a primary-source claim: the reporting (e.g., on Hacker News) follows directly from an official disclosure by eMudhra or a root program update (such as a Mozilla CA Certificate Maintenance bug). The claim is solid and specific — an intermediate key compromise of a broadly trusted CA is a well-defined security incident with concrete remediation steps (revocation, distrust).
Genuinely new; this incident was not previously reported and appears to be a fresh disclosure, with no indication of resurfaced or older material.