Compromised eMudhra Intermediate CA Keys Prompt Immediate Browser and Software Patches

Eight eMudhra intermediate certificate authority (CA) private keys were compromised, according to Mozilla and Google's Chrome Root Program. This breach enables attackers to forge trusted certificates for any website, posing significant security risks.

The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20.

An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept.

A researcher reported the

Read original article