eMudhra Intermediate CA Compromise
On 2026-10-20, it has been disclosed that the private keys of eight eMudhra intermediate CA certificates have been compromised. These keys can be used to issue forged CA certificates that would be considered fully trusted by the affected software, and therefore could be used to perform man-in-the-middle attacks. Importantly, the vulnerability can also affect software self-update processes that use…