eMudhra Intermediate CA Compromise

The compromise of eight eMudhra intermediate CA private keys is a high-severity supply-chain trust event because these certificates chain to widely trusted Mozilla, Microsoft, Apple, and Chrome root programs. CIOs and technology leaders should treat this as an urgent enterprise update cycle: any system that bundles its own trust store or certificate list may need immediate patching to avoid broken TLS validation or unintended trust of affected certificates, with particular attention to OS packages and runtime-specific bundles such as Linux ca-certificates, Python uv/pip, and certifi.