
eMudhra Cybersecurity Fiasco: What It Means for You and How to Stay Protected
What Happened?
eMudhra, a major digital certificate provider in India, faces scrutiny for issuing weak certificates that could be exploited. Major tech companies have blocked these certificates, urging users to stay vigilant.
Key points
- eMudhra issued eight digital certificates with weak private keys.
- The weak keys were created on April 30, 2025, and contained only single-byte numbers.
- Major companies like Apple, Google, and Mozilla have blocked the affected certificates.
- eMudhra claims the issue is limited to the eight certificates and is investigating.
- No public evidence exists that the weakness has been exploited in an attack.
Key insights
- Users should regularly update their browsers and devices to ensure security.
- Vigilance is necessary when clicking links from emails or messages to avoid phishing.
- Ignoring security warnings can lead to serious risks when accessing sensitive sites.
Why it matters
The incident highlights the importance of digital certificate security for online safety.
Entities
Source
India Today

