eMudhra key-transfer script bug forces 8 more RSA intermediate CA revocations, bringing the total to 16

BleepingComputer reports that a new eMudhra incident report says a custom Python script used in April 2025 to move CA private keys between hardware security modules reduced eight ECDSA private keys to a single byte and handled eight RSA keys in host memory ^[1]. eMudhra revoked the eight RSA intermediate CA certificates, including ones used to issue TLS and code-signing certificates, on November 7, bringing the total affected to 16, and says affected customer certificates were replaced or migrated with no evidence of malicious use ^[1]. Sites and code signers using eMudhra certificates should confirm theirs were replaced or migrated, as the company is exiting publicly trusted TLS and plans to stop issuing under its G1 hierarchy by November 16 ^[1].

Industries mainly affected: Technology, Cross-industry

Sites and code signers using eMudhra certificates should confirm theirs were replaced or migrated, as the company is exiting publicly trusted TLS and plans to stop issuing under its G1 hierarchy by November 16 ^[1]