ScienceBreaking NewsBreakingLatest News
eMudhra's Compromised Certificates Threaten Web Trust System
Sentiment: NeutralHigh Priority
What Happened?
A security flaw at eMudhra has exposed eight intermediate certificates with weak keys, raising concerns about web security. Browser makers and CERT-In have issued warnings and taken action.
Key points
- eMudhra's weak private keys could allow attackers to create fake certificates.
- Google and Mozilla have blocked the affected certificates in their browsers.
- eMudhra stated that its infrastructure was not compromised and no Indian data was breached.
- The compromised certificates were linked to eMudhra's global TLS business, accounting for 1% of its revenue.
- The flaw was discovered by an independent researcher and reported to major tech companies.
Key insights
- The incident may lead to increased scrutiny of digital certificate authorities.
- Organizations may need to reassess their reliance on compromised certificates.
- The situation could prompt regulatory reviews of cybersecurity practices in India.
Why it matters
The incident highlights vulnerabilities in digital trust systems that could impact online security.
Entities
eMudhra· CompanyGoogle· CompanyMozilla· CompanyCERT-In· OrganizationIndia· Country
Source
Business Standard
