> TritonInfoSec News
Home / Oct 21, 2026 / Story
0
#3 The Hacker News general October 20, 2026 at 17:09 UTC

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

By [email protected] (The Hacker News)

AI Summary

Eight intermediate CA certificates issued by Indian certificate authority eMudhra were found to have fatally weak private keys — recoverable by anyone — enabling arbitrary trusted certificate forgery for any website. Mozilla, Google Chrome Root Program, Apple, and the Go project (via Go 1.27.3 and 1.26.10) all moved to block the affected certificate chains on October 20. The compromise represents a systemic PKI trust failure, as intermediate CAs can issue certificates for any domain accepted by major browsers.

Read full article → https://thehackernews.com/2026/10/eight-emudhra-ca…

Relevance score: 88.0/100

# More from October 21

  1. 1
    PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert The Hacker News
  2. 2
    Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader The Hacker News
  3. 4
    Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA The Hacker News
  4. 5
    Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution The Hacker News
  5. 6
    AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign SecurityWeek
  6. 7
    Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death Graham Cluley
  7. 8
    Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware The Hacker News
  8. 9
    Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election The Hacker News
  9. 10
    ConnectWise customers hit by supply-chain attack linked to compromised API secret CyberScoop