eMudhra

Reported Context (17)

Browser protections were an important first response to the eMudhra certificate authority incident. Browser Protections Alone Don’t Confirm Enterprise Remediation After the eMudhra Incident
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private eMudhra to Exit Global SSL/TLS Business After Eight Intermediate CA Keys Found Guessable
Eight intermediate certificate authority (CA) private keys belonging to Indian CA eMudhra Limited were compromised due to a critical cryptographic defect during the certificate generation process. Eight eMudhra Intermediate CA Private Keys Compromised by Weak Randomness
Indian certificate authority eMudhra said Thursday it will stop issuing SSL/TLS certificates days after researchers showed that the private keys securing eight of its certificates were so weak they could be eMudhra to Exit SSL/TLS Certificate Business After Weak Keys Found in Eight Certificates
eMudhra, a certificate authority that all the major browsers trust, generated the private keys for eight of its signing certificates in a way that meant one of them is just the number 4, about as easy to guess as a key eMudhra’s Weak Key Generation Exposed Eight Intermediate CA Keys

CVE (6)

People (9)

MITRE ATT&CK (1)

Vendors (18)

Products (43)

Tools (5)

Industries (5)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.