Global Cyber Alert Erupts Over Compromised eMudhra Private Cryptographic Keys
· Technology · Indian Express, Economic Times
Bengaluru-based tech company eMudhra has disclosed that weak private cryptographic keys linked to eight intermediate certificates were compromised following a generation flaw on April 30, 2025. The issue came to light when an independent researcher discovered that the keys could be reverse-engineered using AI-assisted techniques and flagged the risk to major tech firms. Apple, Google, Microsoft, Mozilla, and Cloudflare subsequently blocked all eight affected intermediate certificates to prevent malicious actors from forging certificates or impersonating websites. The compromised keys possessed cryptographic strengths as small as four bits instead of the standard 116 digits. The company is working directly with customers who may be affected.
Why it matters
The compromise of digital certificates threatens global web security by potentially allowing attackers to impersonate trusted websites and intercept secure user connections across billions of everyday devices.
Read the original report — Indian Express
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.