Mozilla, Google, Apple block compromised eMudhra CA certificates

Certificate authority eMudhra revoked eight intermediate certificates after researchers discovered their private keys were critically weak. The weak keys could be recovered almost instantly by anyone, enabling forgery of trusted certificates for legitimate websites. Mozilla, Google, and Apple took action by blocking these compromised certificates in their respective browsers and trust stores. The incident highlights a serious failure in certificate authority key generation practices. This type of compromise undermines the entire web PKI trust model, potentially exposing users to man-in-the-middle attacks and credential theft. Browser vendors acted swiftly to protect users by revoking trust in the affected intermediate certificates.