Google has blocked eight compromised digital certificate keys linked to eMudhra after discovering a weakness that could allow attackers to create fraudulent HTTPS certificates and impersonate websites. Mozilla has also blocked the affected certificates in Firefox, while Google plans to remove a related root certificate from Chrome's trust store on October 27, 2026.
The incident concerns the technology browsers use to establish whether a website's identity can be trusted. Although eMudhra says the affected certificates did not issue certificates to end users, Google's wider security measures could cause some legitimate websites to stop working unless their operators replace their existing certificates.
