EMudhra Intermediate CA Certificates Compromised

Eight eMudhra intermediate Certificate Authority (CA) private keys were found to be compromised, posing significant risks to TLS certificate integrity. The compromise enables threat actors to perform unauthorized TLS certificate signing and man-in-the-middle (MitM) interception attacks. eMudhra is a licensed Certifying Authority, making this a high-impact PKI trust chain issue. Unit 42 published an analysis of the compromise along with a containment guide for affected organizations. The exposure of intermediate CA private keys can allow attackers to impersonate any domain covered under the affected CA hierarchy. This type of compromise undermines the foundational trust model of HTTPS and certificate-based authentication. Organizations relying on eMudhra-issued certificates are advised to review and revoke affected certificates immediately.