Eight Compromised TLS Certificates Trigger Global Internet Security Alert

Image: Ars Technica · Source

Eight intermediate TLS certificates from Indian CA eMudhra were found with severely weak private keys, prompting browsers and major apps to revoke trust and igniting a complex, wide-reaching security cleanup.

In October 2026, the Internet's security community faced a major alert following the discovery of eight compromised TLS certificates issued by the Indian certificate authority eMudhra Limited. These certificates, known as intermediate certificates, hold the authority to issue trusted credentials for any website, making their compromise a critical issue. Alarmingly, the private keys corresponding to these certificates were found to possess extremely weak entropy — some as low as 3 to 8 bits compared to the standard 384 bits expected of secure elliptic curve cryptography keys. Such weak keys can be recovered and abused by attackers to create fraudulent certificates accepted by browsers and other applications.

Upon revelation, major browser vendors and several app developers swiftly responded by blocking all eight intermediate certificates to prevent unauthorized certificate issuance. The compromised keys were demonstrated publicly by the discovery team through a digital signature on a warning message, confirming control of the keys and underscoring the urgency.

Security experts, including cryptography engineer Filippo Valsorda, have compared the ensuing remediation to the extensive recovery effort after the 2014 Heartbleed vulnerability in OpenSSL. The cleanup will be arduous and prolonged, spanning updates across diverse systems such as Linux distributions, embedded devices, Internet of Things hardware, and software ecosystems that bundle their own certificate stores. Many devices and applications may remain vulnerable until patches are applied and certificates are reissued.

Industry observers have speculated that the weak keys may be the result of a flawed or misused key generation interface potentially deploying example or test code accidentally in production, a failure that went unnoticed until now. This incident exposes a fundamental weakness within the TLS trust chain, where the entire system's security hinges on the integrity of each certification authority and its certificates.

Although no indications of malicious use have yet appeared in certificate transparency logs, the risk remains that attackers with network access—particularly in hostile environments or local networks—could perform man-in-the-middle attacks leveraging these compromised certificates. Users of VPN services, where TLS plays a critical role, face heightened risk if their providers rely on any of these certificates.

Most major browsers, including Chrome and Firefox, have disabled trust for the affected certificates, though some platforms such as Microsoft Edge on Windows 10 initially continued to accept connections to servers using them. Microsoft has not immediately detailed plans to block these certificates. Messaging apps like Signal and WhatsApp, which use alternative encryption mechanisms, are reportedly unaffected.

The incident highlights the necessity for vigilant monitoring of certificate authorities and swift action when cryptographic weaknesses are discovered. Transparency logs aid detection but rely on comprehensive and continuous oversight. eMudhra has not provided an official comment as of this writing. Internet users and administrators are urged to ensure their systems and software adopt the latest updates to mitigate any ongoing risks from this certificate compromise.