PKI

Security briefings tagged with PKI

Needs attention

Active incidents, new guidance or unresolved scope that security teams should review now.

Last checked

Review settings

eMudhra certificate compromise

Eight compromised eMudhra intermediate certificates could enable server impersonation and interception of traffic where affected certificates remain trusted.

Why this needs attention

Compromised intermediate certificates can affect how clients and services validate remote identities. The follow-up research documents forged certificates and continued acceptance of affected chains in sampled clients. Customer-managed clients, origins, mutual TLS deployments, and container images may still require action.

What to do now

Identify systems that rely on the affected certificate chain, update trust stores and client software according to the official response, and review customer-managed origins, mutual TLS, and container images.