eMudhra Intermediate CA Compromise

T2Covered by 1 source · first reported by InfoQ at 21 Oct, 17:30 UTC

Private keys for eight eMudhra intermediate CA certificates have been compromised, allowing attackers to forge certificates for any site. The keys were revealed due to low entropy, not through a known breach. Browsers blocked them using revocation lists, but other software had to remove the emSign…