Incident Response21 October 2026
eMudhra Intermediate CA Keys Compromised: What Defenders Must Update
The private keys of eight eMudhra intermediate CA certificates have been compromised, and they chain to roots trusted by the major root programs. The fix is mostly about trust-store hygiene, which is slow to roll out.
pkicertificate-authoritytrust-store
3 min readRead
Web PKI / Certificate Security10 July 2026
CA/Browser Forum Retires 11 Legacy Domain Validation Methods by 2028
Three CA/Browser Forum ballots will phase out email-, phone-, and lookup-based domain control validation, closing off some of the weakest links in how HTTPS certificates get issued.
pkitls-certificatesdomain-validation
4 min readRead
Cryptography & PKI30 June 2026
Short-Sleeve RSA: How Zero-Block Prime Structure Exposed 603 Private Keys in the Wild
Trail of Bits and the badkeys project have uncovered a new class of factorable RSA key — one defined by evenly spaced zero-bit blocks in its prime factors — and found hundreds already deployed in real TLS, SSH, and PGP infrastructure.
rsacryptographypki
4 min readRead