Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

The private keys of eight eMudhra intermediate certificate authority certificates have been compromised, as confirmed by Mozilla and Google's Chrome Root Program. This compromise is significant because an intermediate CA is responsible for signing certificates presented by websites, and possession of these keys could allow an attacker to issue a certificate for any website that a browser would trust. A researcher initially reported the compromise, prompting emergency fixes across browsers and software. The confirmation of the compromise was made on October 20. The affected keys could potentially be used to issue fake certificates for legitimate websites.