NewsArs Technica — Security
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Teaser from the source
Flubbed key signing "ceremony" allowed minting of web credentials for any site.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Ars Technica — SecurityMore on eMudhra
Other advisories
- Not ratedosv:CVE-2026-115929MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs
- HighCVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificates
- HighCVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificates
- Not ratedosv:CVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificates
- CriticalCVE-2026-111943eMudhra intermediate CA private keys compromised
- CriticalCVE-2023-43902eMudhra emSigner: unzureichende Zugriffskontrolle
- MediumCVE-2023-43900eMudhra emSigner: Sicherheitslücke
- CriticalCVE-2023-43902eMudhra emSigner: unzureichende Zugriffskontrolle
Other news entries
- Microsoft releases Windows OOB updates to distrust eMudhra certificatesNewsBleepingComputer
- Microsoft releases out-of-band Windows fixes with certificate updatesNewsThe Register — Security
- eMudhra quits global TLS certificate market after compromise of CA signing keysNewsCSO Online
- eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily GuessableNewsThe Hacker News
- ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 MoreNewsThe Hacker News
- Disgraced Indian cert issuer leaves the cert issuing businessNewsThe Register — Security
- Certification authority eMudhra defends its laughably weak private keysNewsThe Register — Security
- Browsers Block eMudhra Intermediate CAs Over Recoverable Private KeysNewsSecurityWeek
ID