Industry
Certificate authority
- First Reported
- Oct 20, 2026
- Latest Reported
- Oct 22, 2026
Reported Context (5)
- eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private eMudhra to Exit Global SSL/TLS Business After Eight Intermediate CA Keys Found Guessable
- Indian certificate authority eMudhra said Thursday it will stop issuing SSL/TLS certificates days after researchers showed that the private keys securing eight of its certificates were so weak they could be eMudhra to Exit SSL/TLS Certificate Business After Weak Keys Found in Eight Certificates
- An Indian certificate authority revoked eight intermediate certificates after a researcher found it used a private encryption key that was only one byte in length, making it trivial for hackers to recover the key and One-Byte eMudhra Certificate Keys Trigger Revocations and Software Updates
- The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. Eight eMudhra Certificate Authority Keys Compromised; Browsers and Software Block Certificates
- Go 1.27.3 and Go 1.26.10, released on October 20, make Go's certificate verifier reject any certificate chain that passes through one of eight intermediate certificate authority keys. Go Emergency Updates Block Eight Certificate Authority Keys
CVE (1)
People (6)
Vendors (6)
Products (15)
Industries (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
