Cyber Risk Special Advisory: eMudhra’s Certificate Misconfiguration Exposes Users to Website Impersonation and Data Theft
A flaw in eMudhra CA certificates, caused by misconfigured private keys generated in April 2025, allows threat actors to forge trusted digital certificates. While major tech providers have updated browsers, administrators are advised to manually patch vulnerable non-browser infrastructure.