PSA Intelligence | RiskBPO Reports

Cyber Risk Special Advisory: eMudhra’s Certificate Misconfiguration Exposes Users to Website Impersonation and Data Theft

A flaw in eMudhra CA certificates, caused by misconfigured private keys generated in April 2025, allows threat actors to forge trusted digital certificates. While major tech providers have updated browsers, administrators are advised to manually patch vulnerable non-browser infrastructure.

Cybersecurity

In October 2026, researchers discovered a cryptographic flaw affecting eight intermediate Certificate Authority (CA) certificates issued by eMudhra. Out of roughly 50 to 60 globally trusted CAs whose approvals browsers trust, eMudhra operates on a global scale. The vulnerability originated from an internal misconfiguration during an April 2025 key generation ceremony, which resulted in the creation of master keys entirely lacking mathematical randomness for nearly 18 months. Because the private keys were generated as simple integers smaller than 256 characters, researchers were able to calculate and recover them in under a second.

PSA Intelligence Security Analyst Team Inside

The PSA Intelligence team of security and risk analysts monitor thousands of intelligence sources across the Philippines and broader APAC region daily. PSA Intelligence supplies well-known international corporate security operations centers and enterprise risk management teams the reports and data required for their operations.

Contact us to for access to our regular risk management reports and data-feeds. Be sure to talk to us about our analyst vetted, reliable data feeds for your AI driven risk management systems too. We have 20+ years of back-data and keep the data acquisition pipelines running so you don't have to.

Contact Us PSA Intelligence | RiskBPO Reports

PSA Intelligence: Regional Reporting Capabilities

Our fast-paced intelligence pipeline is driven by a dedicated team of Manila-based security analysts that monitor the Philippine landscape every day. We bring together on-the-ground local insight with large scale data monitoring and cut through the noise to deliver the concise, actionable intelligence that our clients rely on to navigate their risks.

Regular Briefs & Industry Monitors

We provide a weekly digest of key political, economic, and security developments and analysis of their short and long-term impact on the local and regional business environment. Our Industry Monitors deliver regular summaries of key developments in manufacturing, energy, mining, and tourism.

Our Cyber Risks Briefs detail emerging cyberthreats, digital security vulnerabilities, and regulatory shifts, while our Economic Briefs provide macroeconomic snapshots covering inflation, trade markers, and fiscal policy. We also publish Health Risks Briefs tracking local disease statistics and healthcare capacities.

Targeted Crime & Kidnapping Reports

Our teams produce continuous updates and analysis on developing crime and safety trends targeting corporates and staff, ranging from opportunistic petty crime to syndicated criminal activity. This includes deep dives on known modus operandi, suspect profiles, and sociopolitical environments.

Additionally, we monitor Kidnapping Related Incidents in the Philippines, tracking publicly-known abduction cases, motives, victim profiles, and the broader regional developments that influence these threat vectors.

Insurgency, Terrorism, and Civil Unrest

We conduct ongoing analysis of activities of Communist insurgents in the Philippines, including their estimated operational capabilities, regional hotspots, and the progress of government peace processes.

Our coverage extends to Islamist Insurgency and Terrorism in Mindanao, assessing activities not limited to terrorism-related motivations but also criminal, personal, and cultural factors. We provide continuous assessments of political stability, strikes, protests, and broader civil unrest dynamics affecting operational continuity.