A security incident at Bengaluru-based digital certificate provider eMudhra Ltd. put global web security at risk due to weak cryptographic keys linked to eight intermediate certificates.
eMudhra stated that staff used the weak keys by mistake during a key generation ceremony in April 2025 due to human errors across multiple steps of the process.
Tech giants including Google, Mozilla, Apple, and Microsoft took emergency action to block the affected certificates while eMudhra reported its infrastructure was not compromised.