Eight eMudhra certificate authority keys compromised
Eight private keys used to issue digital certificates were compromised; browsers blocked the affected certificates.
What happened
Eight private keys used to issue digital certificates were compromised. Chrome, Firefox and other vendors blocked the affected certificates and published fixes for several software components.
Why it matters
It hits the foundation of trust on the internet: the authenticity of connections and of the software we install. The extent of malicious use of those keys was still unclear, and Chrome said it was not aware of any associated TLS certificates logged before the block.
What we recommend
Update browsers, operating systems and runtimes to the versions carrying the block; check whether any system or provider uses eMudhra certificates and replace them; and watch the advisories from the vendors of the software you sign or install.
Related service: 24/7 SOC-Helpdesk
Want to know how it affects you?
We review your environment and tell you what to prioritise, with no commitment.