The Hallway Track
Governance & Policy

eMudhra Intermediate CA Compromise

Simon Willison · Oct 20, 2026 · Governance & Policy

Eight eMudhra intermediate CA private keys compromised, affecting major browser trust stores

“The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.”

A serious PKI compromise has exposed eight eMudhra intermediate CA private keys, affecting trust chains in all major browser and OS root programs. Python tooling (uv, pip, certifi) has already released updates with revoked certificate lists. While critical for infrastructure security, this is not an AI-specific signal.

security certificates PKI python encryption

Watch / read the original source →