Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

Eight eMudhra intermediate certificate authority (CA) private keys have been confirmed compromised, as reported by Mozilla and Google's Chrome Root Program on October 20. Intermediate CA certificates are used to sign website certificates, meaning possession of these keys would allow an attacker to issue fraudulent certificates for any website that browsers would trust. A researcher reported the issue, triggering emergency responses from major browser vendors. Emergency fixes are being rolled out across browsers and software to revoke trust in the affected certificates. This represents a significant threat to web PKI integrity and HTTPS trust across the internet.