logo
About Contact

eMudhra Exits Global SSL/TLS Certificate Business Amid Security Controversies and Browser Blocks

Technology News

eMudhra Exits Global SSL/TLS Certificate Business Amid Security Controversies and Browser Blocks

eMudhra to exit global SSL/TLS certificate business after controversy

Economic Times

eMudhra to exit global SSL/TLS certificate business after controversy

Digital trust services provider eMudhra on Thursday said that it would voluntarily withdraw from the global SSL/TLS certificate business, following an incident where its certificates were found to...

eMudhra to Exit Global SSL/TLS Certificate Business

AIM

eMudhra to Exit Global SSL/TLS Certificate Business

This follows the discovery of eight eMudhra certificate authorities with weak private keys that could potentially have allowed attackers to create fake website certificates and impersonate...

eMudhra to exit global SSL/TLS certificate business after security incident

Business Today

eMudhra to exit global SSL/TLS certificate business after security incident

Chairman V Srinivasan said eMudhra had revoked the affected certificate authorities within 14 hours of discovering the issue.

eMudhra exits global TLS business after security flaw

NewsBytes

eMudhra exits global TLS business after security flaw

Bengaluru-based eMudhra is exiting the global website authentication certificate business after discovering weak private keys in eight of its intermediate security certificates.

Indian firm eMudhra exits global digital certificates business after vulnerability disclosure

Reuters

Indian firm eMudhra exits global digital certificates business after vulnerability disclosure

Indian digital trust services provider eMudhra on Thursday said it would voluntarily withdraw from the global SSL/TLS certificate ​business, following an incident in which its digital certificates...

eMudhra gets out of TLS certificate business, blames social media trolling for move

India Today

eMudhra gets out of TLS certificate business, blames social media trolling for move

eMudhra has decided to exit the global SSL/TLS certificate business following a recent security incident that drew scrutiny on social media. The digital trust company said on October 22 that its...

eMudhra to exit global website security certificate business after key-generation flaw

MoneyControl

eMudhra to exit global website security certificate business after key-generation flaw

Its Indian digital signature and eSign services will continue to operate as usual

eMudhra drops TLS certificates days after browsers blocked its keys

TNW

eMudhra drops TLS certificates days after browsers blocked its keys

eMudhra is leaving the global SSL/TLS certificate business, days after browsers blocked eight of its certificates. The Indian certificate authority’s board decided to withdraw voluntarily, the...

eMudhra exits global SSL certificate business after Google, Apple and Mozilla block certificates

CNBC-TV18

eMudhra exits global SSL certificate business after Google, Apple and Mozilla block certificates

The digital trust firm said the business contributes about 1% of global revenue. It will provide affected customers with replacement certificates at no cost while continuing its other digital...

eMudhra Security Key Leak: What It Means for Users and the Impact on Web Safety

What is eMudhra, and what we know about the web security key leak so far

The Hindu

What is eMudhra, and what we know about the web security key leak so far

Several government websites use a range of eMudhra’s keys to "sign" their security certificates, which is necessary for any website to display on a modern browser.

What is an eMudhra certificate? How the web security key leak could affect internet users

MoneyControl

What is an eMudhra certificate? How the web security key leak could affect internet users

The exposure of eight cryptographic keys linked to eMudhra has put the spotlight on how browsers verify websites and the risks posed by compromised certificate authorities.

What does eMudhra’s web security key leak mean for internet users? | Explained

The Hindu

What does eMudhra’s web security key leak mean for internet users? | Explained

The exposure of eMudhra’s private keys could allow for man-in-the-middle attacks if left unpatched on all devices

Explained | eMudhra's security lapse and what it means for internet users

DECCAN HERALD

Explained | eMudhra's security lapse and what it means for internet users

EMudhra security lapse exposes millions to cyber threats after issuing weak digital identity certificates. Discover how browsers blocked vulnerable keys and what website owners must do now to...

Vulnerable keys were created but never put to commercial use, investigation on: eMudhra cofounder

Economic Times

Vulnerable keys were created but never put to commercial use, investigation on: eMudhra cofounder

eMudhra issues digital signature and website security certificates to enable them securely connect to browsers for public access. "There's no impact to subscribers because we have done all the...

Eight web security keys of eMudhra firm used by Govt. and PSUs leaked

The Hindu

Eight web security keys of eMudhra firm used by Govt. and PSUs leaked

Many government websites, including the Aadhaar issuer UIDAI and the income tax filing portal, use digital certificates or other technology from the Bengaluru-headquartered firm; no indication...

eMudhra Breach Raises Concerns Over Certificate Security and Website Impersonation Risks

CERT-In flags website impersonation risks over eMudhra breach

Financial Express

CERT-In flags website impersonation risks over eMudhra breach

Cybersecurity agency CERT-In has warned of risks from fake websites and malicious software following a security flaw at eMudhra, a digital security and document-processing technology provider. The...

eMudhra breach: Netizens react as IT Ministry says impact on Indian sites ‘very limited’

Economic Times

eMudhra breach: Netizens react as IT Ministry says impact on Indian sites ‘very limited’

Cybersecurity agency CERT-In warned that the compromised keys could let attackers issue fraudulent certificates for domains they do not control, impersonate legitimate websites and carry out...

What went wrong with eMudhra's security certificates and why it matters?

MoneyControl

What went wrong with eMudhra's security certificates and why it matters?

The flaw could have allowed attackers to impersonate websites and make malicious software appear to come from a trusted publisher

CERT-In flags eMudhra certificate flaw, warns of website impersonation risk

MoneyControl

CERT-In flags eMudhra certificate flaw, warns of website impersonation risk

CERT-In says the flaw could also allow malicious software to be passed off as coming from a trusted publisher.

eMudhra's Security Breach: Compromised Certificates Raise Alarms Across Major Browsers

eMudhra co-founder blames script error for weak crypto keys, claims no damage done

India Today

eMudhra co-founder blames script error for weak crypto keys, claims no damage done

for example yahoo.co.in — and use the certificate to pretend the website is genuine. This is because when browsers connect to a website and show you a lock saying the connection is secure, they do...

Why little-known eMudhra set the internet on red alert

Mint

Why little-known eMudhra set the internet on red alert

India’s only certificate issuer trusted by browsers worldwide, eMudhra, is under scrutiny after a researcher found weak security keys in its website certificates. The company calls it a technical...

How eight ‘weak’ eMudhra certificates could let attackers impersonate websites

Mint

How eight ‘weak’ eMudhra certificates could let attackers impersonate websites

Google, Apple and Mozilla have blocked eight digital certificates issued by the Indian certificate authority eMudhra after researchers found dangerously weak private keys. The flaw could let...

How eMudhra's compromised certificates put web's system of trust at risk

Business Standard

How eMudhra's compromised certificates put web's system of trust at risk

Eight eMudhra intermediate certificates had weak private keys that could enable website impersonation, prompting Google, Mozilla and Cloudflare to act to protect internet users

Chrome, Firefox block eMudhra certificates after weak key generation exposed private keys

MoneyControl

Chrome, Firefox block eMudhra certificates after weak key generation exposed private keys

Google and Mozilla have blocked intermediate certificates issued by Bengaluru-based eMudhra after a researcher showed their private keys could be recovered because they were generated with little...

eMudhra Certificate Authority Keys 'Hacked': 8 Certificates Blocked By Chrome, Firefox, Apple And Microsoft- All Details Explained

NEWS18

eMudhra Certificate Authority Keys 'Hacked': 8 Certificates Blocked By Chrome, Firefox, Apple And Microsoft- All Details Explained

Eight eMudhra CA keys were compromised. Chrome, Firefox, Apple and Microsoft blocked them. Here is what happened, the risks and how to secure systems.

What’s the eMudhra security scare that has rattled the internet? All you need to know

ThePrint

What’s the eMudhra security scare that has rattled the internet? All you need to know

Google, Mozilla, Apple and Microsoft blocked 8 digital certificates issued by Indian cybersecurity firm eMudhra Limited after they were found to have critically weak secret keys.

Two web emergencies in one week: guessable certificate keys and critical PHP bugs that leaked before patches

TechSpot

Two web emergencies in one week: guessable certificate keys and critical PHP bugs that leaked before patches

Eight intermediate certificates issued by India-based certificate authority eMudhra were found to have private keys so weak they can be calculated from the certificates themselves. Those...

eMudhra Takes Remedial Action After Security Researcher Flags Weak Intermediate CA Keys

Gadgets 360

eMudhra Takes Remedial Action After Security Researcher Flags Weak Intermediate CA Keys

eMudhra says that it has revoked eight certification authorities in its Global TLS business.

eMudhra says no customer website certificates issued using weak keys, replacement process to take a few...

MoneyControl

eMudhra says no customer website certificates issued using weak keys, replacement process to take a few...

Its Indian digital signature and eSign services remain unaffected, while the incident could carry reputational risks, executive vice president Kaushik Srinivasan said.

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

The Hacker News

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs...

eMudhra Faces Crisis: 20% Share Drop Amid Compromised Security Certifications and Investigations

eMudhra to exit website security certification business, shares tank 20%

DECCAN HERALD

eMudhra to exit website security certification business, shares tank 20%

eMudhra shares tank twenty percent following a major cybersecurity vulnerability involving weak certification authority keys. The Ministry of Electronics and IT investigates the incident while the...

CERT-In Advisory, MeitY Probe And Global Revocations: The eMudhra Security Story Explained

NEWS18

CERT-In Advisory, MeitY Probe And Global Revocations: The eMudhra Security Story Explained

8 intermediate Certificate Authority (CA) certificates issued under eMudhra's global web-security banner were allegedly compromised due to cryptographic weaknesses in private keys

eMudhra shares fall 20% after researchers point out its certificates are compromised

Economic Times

eMudhra shares fall 20% after researchers point out its certificates are compromised

Shares of the company fell 20% and hit the lower circuit after the security flaw was highlighted. The discovery has raised concerns that attackers could use the certificates to create fake...

eMudhra intermediate CA certificates compromised: What users should know

Mint

eMudhra intermediate CA certificates compromised: What users should know

CERT-In has warned that eight eMudhra intermediate CA certificates were compromised due to weak cryptographic keys. Here's how fraudulent certificates could threaten encrypted communications and...

eMudhra's Certificate Crisis: Private Key Vulnerabilities Lead to Business Shutdown and Browser Blocks

Certification authority eMudhra defends its laughably weak private keys

The Register

Certification authority eMudhra defends its laughably weak private keys

Says it passed audits and made just a minor mystery error

CyberScoop

eMudhra kills its certificate business after researchers cracked its private keys in under a second

The private keys were so weak they could be guessed in under a second — and one of them was just the number 4.

Browsers Block eMudhra Certificates After Key Flaw

AIM

Browsers Block eMudhra Certificates After Key Flaw

Private keys were recoverable almost instantly, potentially enabling attackers to impersonate trusted websites.

Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’

The Register

Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’

Massive clean-up job under way because this mess makes it possible to impersonate any website or service

MeitY Launches Investigation into eMudhra Security Breach Amidst Certificate Concerns

eMudhra security incident: What went wrong with its digital certificates and why MeitY is investigating

Firstpost

eMudhra security incident: What went wrong with its digital certificates and why MeitY is investigating

India’s IT ministry has set up a special team to investigate a security lapse involving eight intermediate certificate authorities linked to eMudhra’s global operations. While Google and Mozilla...

eMudhra security breach: MeitY orders probe, impact limited

Mint

eMudhra security breach: MeitY orders probe, impact limited

MeitY has ordered a probe into the eMudhra security incident involving eight compromised digital certificates. The ministry said the impact on Indian websites and apps was limited and clarified...

CERT-In issues urgent alert on eMudhra; MeitY forms team to investigate

CNBC-TV18

CERT-In issues urgent alert on eMudhra; MeitY forms team to investigate

CERT-In and MeitY investigate an eMudhra security incident involving compromised private keys, as shares fall 20% and global tech giants respond.

MeitY sets up team to probe eMudhra certificate breach, says digital signature services unaffected

ThePrint

MeitY sets up team to probe eMudhra certificate breach, says digital signature services unaffected

MeitY has formed a special team to probe eMudhra’s certificate flaw, as Google & Mozilla block affected certificates & shares plunge 20%. The ministry says Indian eSign services remain unaffected.

Coverage dates

First reported:

First saved on ClustZ:

Coverage updated:

We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.