<p>Mozilla has <a
href="https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/">announced</a>
that it has received a <a href="https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ">report</a> that private keys associated with eight <a
href="https://emudhra.com/en-us/">eMudhra</a> intermediate certificates have
been compromised:</p>

<blockquote class="bq">
These keys could allow attackers to issue fraudulent HTTPS certificates for
websites they do not control. An attacker who could intercept a user's
connection could use those certificates to impersonate websites and potentially
read or modify traffic.
</blockquote>

<p>Mozilla has blocked the affected certificates using its <a
href="https://blog.mozilla.org/security/2015/03/03/revoking-intermediate-certificates-introducing-onecrl/">OneCRL</a>
centralized list of revoked certificates, and has updated the trusted
certificate list in <a
href="https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs">Network
Security Services (NSS) 3.131.1</a>.</p>

<p>There is a <a href="https://emudhra.we-have-a-problem.com/">single-page
site</a> about the compromise that goes into more detail. According to the site
the certificates have also been blocked in Chrome since October&#160;17, Apple
devices since the 19th, and Microsoft blocked the certificates on the
20th. There is also a table that displays whether a browser or other client
still trusts the compromised certificates.</p>

<p>The NetBSD foundation has <a
href="https://mastodon.sdf.org/@netbsd/117473734072004396">issued
instructions</a> to block the certificates on NetBSD installations. Users of
other browsers and operating systems may wish to check for updates or guidance
to disable the compromised certificates.</p>

<p></p>