logo
About Contact

eMudhra's Troubling Exit: Security Breach Forces Withdrawal from Global SSL/TLS Certificate Market

Technology News

eMudhra's Troubling Exit: Security Breach Forces Withdrawal from Global SSL/TLS Certificate Market

Why eMudhra’s exit from the website certification business is not enough

MediaNama

Why eMudhra’s exit from the website certification business is not enough

eMudhra will exit the global SSL/TLS certificate business days after researchers exposed weak private keys in eight intermediate certificates.

eMudhra quits global TLS certificate market after compromise of CA signing keys

Computer World

eMudhra quits global TLS certificate market after compromise of CA signing keys

Indian digital trust company eMudhra has announced that it is exiting the global SSL/TLS certificate business and is offering customers certificates issued by Sectigo as an alternative, following...

'One-off Human And Script Error', Says eMudhra Co-founder Kaushik Srinivasan As Company To Exit Global SSL/TLS Business | Exclusive

NEWS18

'One-off Human And Script Error', Says eMudhra Co-founder Kaushik Srinivasan As Company To Exit Global SSL/TLS Business | Exclusive

eMudhra to exit its global SSL/TLS certificate business after a weak-key incident. Co-founder Kaushik Srinivasan called it a one-off script error as questions remain.

eMudhra to Exit Global SSL/TLS Certificate Business

AIM

eMudhra to Exit Global SSL/TLS Certificate Business

This follows the discovery of eight eMudhra certificate authorities with weak private keys that could potentially have allowed attackers to create fake website certificates and impersonate...

eMudhra to exit global SSL/TLS certificate business after controversy

Economic Times

eMudhra to exit global SSL/TLS certificate business after controversy

Digital trust services provider eMudhra on Thursday said that it would voluntarily withdraw from the global SSL/TLS certificate business, following an incident where its certificates were found to...

eMudhra to exit global website security certificate business after key-generation flaw

MoneyControl

eMudhra to exit global website security certificate business after key-generation flaw

Its Indian digital signature and eSign services will continue to operate as usual

Indian firm eMudhra exits global digital certificates business after vulnerability disclosure

Reuters

Indian firm eMudhra exits global digital certificates business after vulnerability disclosure

Indian digital trust services provider eMudhra on Thursday said it would voluntarily withdraw from the global SSL/TLS certificate ​business, following an incident in which its digital certificates...

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

The Hacker News

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported...

eMudhra exits global SSL certificate business after Google, Apple and Mozilla block certificates

CNBC-TV18

eMudhra exits global SSL certificate business after Google, Apple and Mozilla block certificates

The digital trust firm said the business contributes about 1% of global revenue. It will provide affected customers with replacement certificates at no cost while continuing its other digital...

eMudhra to exit website security certification business, shares tank 20%

DECCAN HERALD

eMudhra to exit website security certification business, shares tank 20%

eMudhra shares tank twenty percent following a major cybersecurity vulnerability involving weak certification authority keys. The Ministry of Electronics and IT investigates the incident while the...

Indian tech company eMudhra announces withdrawal from certificate business after security incident

The Record

Indian tech company eMudhra announces withdrawal from certificate business after security incident

The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the company's private keys was just the number four.

eMudhra Web Security Key Leak: Implications for Internet Users and Digital Safety

What is eMudhra, and what we know about the web security key leak so far

The Hindu

What is eMudhra, and what we know about the web security key leak so far

Several government websites use a range of eMudhra’s keys to "sign" their security certificates, which is necessary for any website to display on a modern browser.

What does eMudhra’s web security key leak mean for internet users? | Explained

The Hindu

What does eMudhra’s web security key leak mean for internet users? | Explained

The exposure of eMudhra’s private keys could allow for man-in-the-middle attacks if left unpatched on all devices

What is an eMudhra certificate? How the web security key leak could affect internet users

MoneyControl

What is an eMudhra certificate? How the web security key leak could affect internet users

The exposure of eight cryptographic keys linked to eMudhra has put the spotlight on how browsers verify websites and the risks posed by compromised certificate authorities.

Eight web security keys of eMudhra firm used by Govt. and PSUs leaked

The Hindu

Eight web security keys of eMudhra firm used by Govt. and PSUs leaked

Many government websites, including the Aadhaar issuer UIDAI and the income tax filing portal, use digital certificates or other technology from the Bengaluru-headquartered firm; no indication...

eMudhra's Digital Certificate Crisis: What You Need to Know About the Security Breach

Explainer: The trust crisis in eMudhra’s digital certificate business

Financial Express

Explainer: The trust crisis in eMudhra’s digital certificate business

A flaw in the digital security system used to establish trust in websites has put Indian cybersecurity firm eMudhra under scrutiny, prompting Google and Mozilla to block affected digital...

Apple, Google Rush to Block eMudhra Security Certificates

iPhone in Canada

Apple, Google Rush to Block eMudhra Security Certificates

Major browsers are blocking eight compromised eMudhra security certificates after researchers discovered critically weak private keys.

Explained | eMudhra's security lapse and what it means for internet users

DECCAN HERALD

Explained | eMudhra's security lapse and what it means for internet users

EMudhra security lapse exposes millions to cyber threats after issuing weak digital identity certificates. Discover how browsers blocked vulnerable keys and what website owners must do now to...

Why little-known eMudhra set the internet on red alert

Mint

Why little-known eMudhra set the internet on red alert

India’s only certificate issuer trusted by browsers worldwide, eMudhra, is under scrutiny after a researcher found weak security keys in its website certificates. The company calls it a technical...

Certification authority eMudhra defends its laughably weak private keys

The Register

Certification authority eMudhra defends its laughably weak private keys

Says it passed audits and made just a minor mystery error

What’s the eMudhra security scare that has rattled the internet? All you need to know

ThePrint

What’s the eMudhra security scare that has rattled the internet? All you need to know

Google, Mozilla, Apple and Microsoft blocked 8 digital certificates issued by Indian cybersecurity firm eMudhra Limited after they were found to have critically weak secret keys.

eMudhra Certificate Authority Keys 'Hacked': 8 Certificates Blocked By Chrome, Firefox, Apple And Microsoft- All Details Explained

NEWS18

eMudhra Certificate Authority Keys 'Hacked': 8 Certificates Blocked By Chrome, Firefox, Apple And Microsoft- All Details Explained

Eight eMudhra CA keys were compromised. Chrome, Firefox, Apple and Microsoft blocked them. Here is what happened, the risks and how to secure systems.

Browsers Block eMudhra Certificates After Key Flaw

AIM

Browsers Block eMudhra Certificates After Key Flaw

Private keys were recoverable almost instantly, potentially enabling attackers to impersonate trusted websites.

eMudhra says no customer website certificates issued using weak keys, replacement process to take a few...

MoneyControl

eMudhra says no customer website certificates issued using weak keys, replacement process to take a few...

Its Indian digital signature and eSign services remain unaffected, while the incident could carry reputational risks, executive vice president Kaushik Srinivasan said.

eMudhra Faces Security Crisis: Key Vulnerabilities and Business Fallout Uncovered

ETtech Explainer: Decoding eMudhra’s keys to chaos

Economic Times

ETtech Explainer: Decoding eMudhra’s keys to chaos

Weak cryptographic keys associated with eight intermediate certificate authorities operated by eMudhra could be reverse-engineered, or recovered, potentially allowing the issue of fraudulent...

Disgraced eMudhra drops out of TLS business after using cert private key of 4

Ars Technica

Disgraced eMudhra drops out of TLS business after using cert private key of 4

eMudhra, the certificate authority that issued eight intermediate TLS credentials so weak that anyone could mint certificates for any website or mail server—one had a private encryption key of...

eMudhra Takes Remedial Action After Security Researcher Flags Weak Intermediate CA Keys

Gadgets 360

eMudhra Takes Remedial Action After Security Researcher Flags Weak Intermediate CA Keys

eMudhra says that it has revoked eight certification authorities in its Global TLS business.

Two web emergencies in one week: guessable certificate keys and critical PHP bugs that leaked before patches

TechSpot

Two web emergencies in one week: guessable certificate keys and critical PHP bugs that leaked before patches

Eight intermediate certificates issued by India-based certificate authority eMudhra were found to have private keys so weak they can be calculated from the certificates themselves. Those...

eMudhra Breach Raises Concerns Over Certificate Security and Website Impersonation Risks

CERT-In flags website impersonation risks over eMudhra breach

Financial Express

CERT-In flags website impersonation risks over eMudhra breach

Cybersecurity agency CERT-In has warned of risks from fake websites and malicious software following a security flaw at eMudhra, a digital security and document-processing technology provider. The...

eMudhra breach: Netizens react as IT Ministry says impact on Indian sites ‘very limited’

Economic Times

eMudhra breach: Netizens react as IT Ministry says impact on Indian sites ‘very limited’

Cybersecurity agency CERT-In warned that the compromised keys could let attackers issue fraudulent certificates for domains they do not control, impersonate legitimate websites and carry out...

What went wrong with eMudhra's security certificates and why it matters?

MoneyControl

What went wrong with eMudhra's security certificates and why it matters?

The flaw could have allowed attackers to impersonate websites and make malicious software appear to come from a trusted publisher

CERT-In flags eMudhra certificate flaw, warns of website impersonation risk

MoneyControl

CERT-In flags eMudhra certificate flaw, warns of website impersonation risk

CERT-In says the flaw could also allow malicious software to be passed off as coming from a trusted publisher.

eMudhra Security Breach Sparks MeitY Investigation and Urgent Alerts from CERT-In

eMudhra security incident: What went wrong with its digital certificates and why MeitY is investigating

Firstpost

eMudhra security incident: What went wrong with its digital certificates and why MeitY is investigating

India’s IT ministry has set up a special team to investigate a security lapse involving eight intermediate certificate authorities linked to eMudhra’s global operations. While Google and Mozilla...

CERT-In Advisory, MeitY Probe And Global Revocations: The eMudhra Security Story Explained

NEWS18

CERT-In Advisory, MeitY Probe And Global Revocations: The eMudhra Security Story Explained

8 intermediate Certificate Authority (CA) certificates issued under eMudhra's global web-security banner were allegedly compromised due to cryptographic weaknesses in private keys

CERT-In issues urgent alert on eMudhra; MeitY forms team to investigate

CNBC-TV18

CERT-In issues urgent alert on eMudhra; MeitY forms team to investigate

CERT-In and MeitY investigate an eMudhra security incident involving compromised private keys, as shares fall 20% and global tech giants respond.

MeitY sets up team to probe eMudhra certificate breach, says digital signature services unaffected

ThePrint

MeitY sets up team to probe eMudhra certificate breach, says digital signature services unaffected

MeitY has formed a special team to probe eMudhra’s certificate flaw, as Google & Mozilla block affected certificates & shares plunge 20%. The ministry says Indian eSign services remain unaffected.

Coverage dates

First reported:

First saved on ClustZ:

Coverage updated:

We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.