Compromise of private keys for eight eMudhra intermediate certificates
In brief
- Private keys for eight eMudhra intermediate certificates have been compromised.
- Certificates chain to roots trusted by major vendors including Mozilla, Microsoft, Apple and Chrome.
- Software relying on bundled trusted certificate lists must be updated.
The private keys for eight eMudhra intermediate certification authority certificates have been compromised, according to the announcement. These certificates chain to roots trusted by Mozilla, Microsoft, Apple and Chrome, as well as many other downstream trust stores. Any software that bundles a list of trusted certificates must be updated.
What it changes for you
- CybersecuritySecurity teams must verify and deploy updates to trusted certificate lists across their infrastructures.
This summary gives you the essentials. The full article, its figures and quotes are on Simon Willison's Weblog.
Read the original articleAI-generated summary of the source, checked by rules. How we write · Report an error