eMudhra Intermediate CA Keys Compromised, Prompting Emergency Browser Fixes

The Hacker News reported that the private keys for eight eMudhra intermediate certificate authority (CA) certificates have been compromised, a fact confirmed by Mozilla and Google’s Chrome Root Program on 20 October. The breach means that anyone possessing these keys could create fraudulent TLS certificates that browsers would still trust, potentially enabling man‑in‑the‑middle attacks on any site using an eMudhra‑issued certificate.

An intermediate CA sits between the root authority and the end‑entity certificates presented by websites, so the compromise effectively allows an attacker to issue seemingly legitimate certificates for any domain. Browsers that trust the eMudhra root will therefore accept these forged certificates, exposing users to spoofed sites, credential theft, and data interception.

In response, both Mozilla and Google have pushed emergency updates to Firefox, Chrome, and other Chromium‑based browsers, revoking the affected intermediate certificates and distributing replacement trust stores. Software vendors that embed browser engines or rely on the operating system’s certificate store are also being urged to roll out patches to prevent the compromised keys from being accepted.

Australian small‑ and medium‑size businesses should treat this as a high‑priority security issue. IT managers are advised to verify whether any of their public‑facing services use eMudhra certificates, update all browsers and operating systems to the latest versions, and consider re‑issuing certificates from a trusted CA. Engaging a local managed service provider can help ensure that all endpoints are correctly patched and that any vulnerable certificates are replaced promptly.

Wepro Technology, based in Darwin, can assist businesses with the necessary remediation steps and offers security‑focused training, including CCNA and upcoming CEH and CHFI courses, to help IT staff recognise and mitigate certificate‑related threats.