Enterprise
eMudhra appoints KPMG to review compromised certificate keys; browser makers await root-cause report
eMudhra has hired KPMG to investigate compromised certificate keys following a request for an independent audit.
Topic
#Emudhra
Stories tagged by our AI curator.
Enterprise
eMudhra security lapse: Microsoft drops firm’s certificates from trusted list on Windows & Edge
Microsoft has removed eMudhra's compromised digital certificates from its Windows and Edge trusted list, following actions by other global tech companies.
Enterprise
Microsoft releases out-of-band Windows fixes with certificate updates
Microsoft released an out-of-band Windows certificate update for devices unable to access automatic updates, following a compromised eMudhra certificate incident. The patch addresses certificate trust list updates for Windows 10, 11 and Server 2025.
Enterprise
The eMudhra incident is a trust problem, not a browser problem
A commentary by Checkmarx Research argues the eMudhra browser certificate vulnerability reveals deeper trust infrastructure issues beyond browser implementation.
Policy
eMudhra’s rise from Indian digital signatures to global cybersecurity—& red flags ignored along the way
eMudhra, a Bengaluru digital security firm, faces international business pressure after compromised security keys, despite earlier credibility built on Indian government contracts.
Enterprise
eMudhra quits global TLS certificate market after compromise of CA signing keys
Indian digital trust company eMudhra is exiting the global SSL/TLS certificate business after the compromise of private keys at eight of its certificate authorities, offering customers free replacement certificates from Sectigo.
Enterprise
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Indian certificate authority eMudhra is exiting the TLS business following a major security incident involving weak encryption keys.
Enterprise
eMudhra To Exit Certificate Business As Security Flaw Triggers Distrust
Indian cybersecurity company eMudhra announced plans to exit its SSL/TLS certificate business following a security incident where intermediate CA private keys were compromised, leading to distrust from Google and Mozilla.
Enterprise
eMudhra to exit global website security certificate business
Bengaluru-based eMudhra exits its global SSL/TLS certificate business after weak cryptographic keys prompted Google and Mozilla to block affected certificates, citing rising compliance costs and diminishing returns.
Also covered by 2 other outlets
Enterprise
Disgraced Indian cert issuer leaves the cert issuing business
eMudhra abandons its global SSL/TLS certificate business after public scrutiny over weak private keys, citing compliance costs and competition from free certificate providers as justification for the exit.
Enterprise
eMudhra drops TLS certificates days after browsers blocked its keys
Indian certificate authority eMudhra is withdrawing from the global SSL/TLS certificate business days after browsers blocked eight of its certificates.
Policy
Little-known eMudhra set the internet on red alert. What really happened?
eMudhra, India's only globally-trusted certificate authority, faces scrutiny over weak security keys discovered in its website certificates, though the company attributes it to a technical flaw rather than a breach.
Enterprise
Certification authority eMudhra defends its laughably weak private keys
Indian certification authority eMudhra acknowledged that weak private keys used to sign digital certificates, including one as simple as the number "4," were generated during a key ceremony in April 2025, creating a security risk for websites and resources.
Policy
eMudhra security incident: MeitY orders probe, says impact on Indian websites and apps was limited; details here
India's MeitY has ordered a probe into eMudhra's security breach involving eight compromised digital certificates, concluding impact on Indian websites and apps was limited and domestic digital signature services unaffected.
Policy
eMudhra Weak Link Tests India’s Chain Of Digital Trust
eMudhra's discovery of eight compromised intermediate CA certificates, including one with a weak private key, prompted browser makers to revoke trust, exposing vulnerabilities in India's role as a custodian of global digital infrastructure.
Enterprise
Vulnerable keys were created but never put to commercial use, investigation on: eMudhra cofounder
eMudhra co-founder stated that compromised digital certificate keys were never deployed commercially and had no impact on subscribers or other business lines.
Policy
MeitY sets up team to probe eMudhra certificate breach, says digital signature services unaffected
India's Ministry of Electronics and Information Technology investigates a certificate flaw at eMudhra after Google and Mozilla blocked affected certificates, though digital signature services remain operational.
Policy
Special team to probe eMudhra incident; impact on Indian websites, applications very limited: Govt
India's government forms a team to investigate a security incident at eMudhra's certificate business, saying the impact on Indian websites and applications is limited.