eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise
eMudhra revokes eight additional certificate authorities previously declared unaffected following a major security failure.
Velocity
How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →
📍 How it ended
The eMudhra security incident widened as the company revoked eight additional certificate authorities following the discovery of weak keys. eMudhra attributed the compromise and the resulting global certificate trust crisis to a buggy Python script that truncated private keys. Consequently, Microsoft pulled its trust while the company issued a full report on the coding error.
Epilogue added 2h ago, after coverage quieted.
The brief
Recent technology reporting outlines a significant security incident involving eMudhra, centered around the revocation of eight more certificate authorities that were previously declared unaffected by a key compromise. According to coverage from outlets such as The Hacker News, CyberSecurityNews, The Indian Express, India Today, and The Hans India, the ongoing situation follows a major SSL private key security failure and an internet security scare. The reports detail that a specific Python error and a coding error led to private keys becoming as weak as four. The company has shared a full report detailing the security key incident and explained the technical background behind the internet meltdown that drew widespread attention across multiple tech-focused news publications.
Coverage from CyberSecurityNews and The Hacker News emphasizes the specific administrative actions taken by eMudhra, highlighting the reversal of their earlier assessment regarding the safety of the eight certificate authorities. Meanwhile, publications including The Indian Express, India Today, and The Hans India focus heavily on the mechanics of the failure itself, detailing how a Python error resulted in dangerously weak private keys. The multiplicity of sources demonstrates intense scrutiny from specialized cybersecurity reporting as well as broader Indian news organizations, each examining the sequence of technical missteps and the subsequent revocation measures implemented by the organization.
The context provided across these reports establishes that the incident caused a major internet security scare and a broader internet meltdown, drawing immediate attention to the vulnerabilities within digital certificate management. While the coverage outlines the technical root cause involving flawed code generation, it highlights how quickly trust in digital infrastructure can be tested when private keys fail to meet necessary security standards. The ongoing disclosures from eMudhra provide the public and industry stakeholders with an accounting of how the coding error slipped through and the extent of the subsequent revocations required to secure the affected systems.
Looking forward, readers must monitor further reporting from these outlets to see how the company manages the fallout from these additional revocations and whether further technical audits are disclosed. Coverage does not yet specify the full long-term impact on dependent services or any additional regulatory responses beyond the immediate incident reports. Observers will rely on updates from the mentioned publications to track any new developments regarding eMudhra's infrastructure integrity and the complete resolution of the security key incident.
Synthesized by PULSE from the headlines below under a strict no-invention contract. ✓ fact-checked: all claims supported by sources Updated 3d ago.
Quick answers
What action did eMudhra take regarding additional certificate authorities?
According to The Hacker News, eMudhra revoked eight more certificate authorities that it had previously declared unaffected by the key compromise.
What caused the security incident according to the reports?
Reporting from The Indian Express and other outlets explains that a Python coding error led to private keys becoming as weak as four.
Which outlets are covering the eMudhra security incident?
Coverage includes reports from The Hacker News, CyberSecurityNews, The Indian Express, India Today, and The Hans India.
Coverage (12)
- eMudhra fiasco widens: eight more CAs revoked, Microsoft pulls trust iTnews · 3d ago
- eMudhra Blames Faulty Python Script for One-Byte CA Keys, Revokes 8 More Authorities BigGo Finance · 3d ago
- eMudhra Says A Buggy Python Script Truncated Its CA Private Keys, Leading To Last Month's Global Certificate Trust Crisis OfficeChai · 3d ago
- eMudhra Revokes Eight Intermediate CAs After Researcher Finds Weak Keys news.lavx.hu · 3d ago
- Disgraced former CA eMudhra blames buggy script for hopelessly weak certificates The Register · 3d ago
- eMudhra revokes 8 more CA certificates after private key mishap BleepingComputer · 3d ago
- eMudhra attributes 8 weak digital keys to Python script glitch NewsBytes · 3d ago
- eMudhra Explains Python Error Behind Major Internet Security Scare The Hans India · 3d ago
- eMudhra Revokes 8 More Certificate Authorities Following Major SSL Private Key Security Failure CyberSecurityNews · 3d ago
- eMudhra security incident: How a coding error led to private keys as weak as ‘4’ The Indian Express · 3d ago
- eMudhra shares full report on security key incident, here is what caused the internet meltdown India Today · 3d ago
- eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise The Hacker News · 3d ago
Topics
Related trends
Microsoft outage 'stark reminder' of how much we rely on tech
A massive global Microsoft outage triggers widespread disruptions, sparking urgent warnings from IT experts and officials worldwide.
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
OpenAI launches Daybreak Red Team and Defense Factory security tools while warning organizations they face doom without them.
FBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
The FBI seized more than $1.2 billion in cryptocurrency stolen from Binance and disrupted a North Korean "FaceStealer" social-engineering campaign that used webcam videos and deepfakes to deliver malware.
Maersk confirms data breach as WhiteArmor ransomware demands $5 million
Maersk confirms data breach as WhiteArmor ransomware gang demands $5 million ransom, marking latest cyber hit on global shipping.
Lego marketplace BrickLink offline after 'unusual activity' detected
Lego's BrickLink marketplace remains offline for a fifth day after the company detected unusual activity, disrupting sellers and delaying a major designer program announcement.
If hackers can take over a supermarket fridge, what else is at risk?
French supermarket refrigerators and freezers were hacked, prompting US and European officials to warn that connected appliances are a new front in state-linked cyberattacks.