GENERAL/ MISCELLANEOUS CIRCULARS
Cyber Threat Advisory on Compromised eMudhra CA Keys by Data Security Council of India
By TEAM CIRCULAR EXPRESS • 23 Oct 2026
👁 12 views
• DSCI has issued a threat advisory regarding the compromise of eight eMudhra intermediate CA certificates.
• The private keys were found to be weak and easily recoverable, posing risks of forged certificates.
• Users must update browsers and operating systems immediately.
• IT teams should patch trust stores, rebuild container images, and migrate affected emSign certificates to the RSA G1 chain to ensure security.
• The private keys were found to be weak and easily recoverable, posing risks of forged certificates.
• Users must update browsers and operating systems immediately.
• IT teams should patch trust stores, rebuild container images, and migrate affected emSign certificates to the RSA G1 chain to ensure security.
purpose of issuance
To provide guidance and recommended actions for the Indian industry following the compromise of eMudhra intermediate CA certificates.
Most Important Details
Eight intermediate CA keys (six TLS, two code-signing) were generated with low entropy, allowing for easy recovery. This affects 16 certificates including Sectigo cross-signs. Organizations must update CA bundles, runtimes, and migrate certificates from the ECC G3 chain to the RSA G1 chain.
issuing authority
Data Security Council of India (DSCI)
🔒 Document — view only
Regards, Circular Express
Similar Circulars
FAQ on Income Recognition, Asset Classification and Provisioning for Advances, Union Bank of India
#General
Notice Regarding Mandatory Wearing of Gowns by Advocates at Delhi High Court
#Delhi#General#LEGAL
Invitation for Stakeholder Suggestions by High-Level Study Group on Indian Film Industry
#General
Telecommunication Interconnection (Third Amendment) Regulations 2026 by TRAI
#General#TRAI
Advisory for OTT Platforms and Digital News Publishers by Ministry of Information & Broadcasting
#Cyber Security#General#Guidelines
Telecom Consumers Complaint Redressal (Fourth Amendment) Regulations 2026 by TRAI
#General#TRAI
You are viewing
Cyber Threat Advisory on Compromised eMudhra CA Keys by Data Security Council of India
For Circular Express Members Only
Enter your registered 10-digit mobile number to view this circular.
Member Verified
LOGIN FOR PERMANENT ACCESSOne Time Access shows this circular only. Login keeps you signed in for all circulars.
GENERAL/ MISCELLANEOUS CIRCULARS
Cyber Threat Advisory on Compromised eMudhra CA Keys by Data Security Council of India
By TEAM CIRCULAR EXPRESS • 23 Oct 2026
👁 12 views
• DSCI has issued a threat advisory regarding the compromise of eight eMudhra intermediate CA certificates.
• The private keys were found to be weak and easily recoverable, posing risks of forged certificates.
• Users must update browsers and operating systems immediately.
• IT teams should patch trust stores, rebuild container images, and migrate affected emSign certificates to the RSA G1 chain to ensure security.
• The private keys were found to be weak and easily recoverable, posing risks of forged certificates.
• Users must update browsers and operating systems immediately.
• IT teams should patch trust stores, rebuild container images, and migrate affected emSign certificates to the RSA G1 chain to ensure security.
purpose of issuance
To provide guidance and recommended actions for the Indian industry following the compromise of eMudhra intermediate CA certificates.
Most Important Details
Eight intermediate CA keys (six TLS, two code-signing) were generated with low entropy, allowing for easy recovery. This affects 16 certificates including Sectigo cross-signs. Organizations must update CA bundles, runtimes, and migrate certificates from the ECC G3 chain to the RSA G1 chain.
issuing authority
Data Security Council of India (DSCI)
🔒 Document — view only
Regards, Circular Express
Similar Circulars
FAQ on Income Recognition, Asset Classification and Provisioning for Advances, Union Bank of India
#General
Notice Regarding Mandatory Wearing of Gowns by Advocates at Delhi High Court
#Delhi#General#LEGAL
Invitation for Stakeholder Suggestions by High-Level Study Group on Indian Film Industry
#General
Telecommunication Interconnection (Third Amendment) Regulations 2026 by TRAI
#General#TRAI
Advisory for OTT Platforms and Digital News Publishers by Ministry of Information & Broadcasting
#Cyber Security#General#Guidelines
Telecom Consumers Complaint Redressal (Fourth Amendment) Regulations 2026 by TRAI
#General#TRAI
