Google, Mozilla revoke eMudhra intermediates after private key compromise

Google and Mozilla revoked multiple eMudhra intermediate certificate authorities after discovering their private keys were compromised and generated with insufficient randomness, creating a global trust-chain risk that could enable impersonation of websites, services, and some code-signing workflows. For CIOs and IT leaders, the incident underscores how a third-party PKI failure can disrupt customer access, break dependencies in browsers and enterprise apps, and force urgent certificate rotation across payment systems, vendor integrations, mobile apps, Java services, and network appliances that may not rely on the same trust stores as browsers.