India’s Premier Certificate Authority eMudhra Leaks Private Keys for Eight Certificates, Necessitating Widespread Software Updates for Certificate Revocation
17 hour ago / Read about 0 minute
Author:小编   

eMudhra/emSign, India's foremost digital certificate authority, has come under scrutiny after it was revealed that the private keys for eight intermediate certificates—which are instrumental in issuing subordinate certificates—were compromised. Armed with these private keys, malicious actors gain the capability to forge certificates for any website or online service, thereby facilitating man-in-the-middle attacks. In response, browsers and major software applications, including those developed by Firefox, Google, Apple, and Microsoft, have swiftly rolled out updates to revoke the affected certificates. To mitigate potential security threats, users are strongly advised to update their browsers and software without delay.