guages had blocked all eight of the intermediate certificates. There are no reports of certificate transparency logs, which track the issuance of all browser-trusted certificates, showing the compromised keys being used maliciously. The threat remains far from over, however, because it will be hard and time-consuming to update other key parts of the Internet, such as Linux distributions and embedded and Internet-of-things devices.

One word: bonkers

The eight intermediate certificates belong to India-based certificate authority eMudhra Limited. An informal advisory published to emudhra.we-have-a-problem.com over the weekend posted the message “We have a problem here - Wayne.” The words were digitally signed using the private key of one of the eMudhra certificates. With proof that the reporting party had control of the key, defenders scrambled because the same key could be used to sign unauthorized certificates that would be trusted by millions of servers around the world.

Read full article

Comments

28:T427,{"@context":"https://schema.org","@type":"NewsArticle","@id":"https://nvdium.com/en/articles/106310339#article","url":"https://nvdium.com/en/articles/106310339","headline":"The Internet goes on high alert after discovery of 8 compromised TLS certs","description":"Intermediate certs allow anyone to mint web credentials for any Internet server.","datePublished":"2026-10-20T20:27:59.132Z","dateModified":"2026-10-21T20:45:01.412Z","mainEntityOfPage":"https://nvdium.com/en/articles/106310339","isAccessibleForFree":