eMudhra

When millions of your citizens live and work in the Gulf, any regional escalation is an immediate domestic crisis.

Our final story for today, eMudra to shut global certificate business after security lapse.

This is a textbook, frankly, terrifying example of how rapidly a cybersecurity failure can completely collapse a business unit.

eMudra is shutting down its global SSL and TLS certificate business entirely.

I am marveling at the speed of this unraveling.

Now, let's break down how this works.

If you are browsing the internet, an SSL or TLS certificate is essentially the digital passport that tells your web browser, yes, this website is exactly who it claims to be and it is safe to enter your credit card here.

Exactly.

The vulnerabilities, hidden for more than a decade, have also triggered precautionary action worldwide.

The government is exploring India-based alternatives to overseas audit firms in the digital certificate ecosystem following the eMudra security incident.

The move follows a compromise of private keys linked to eight eMudra intermediate certificates, which were revoked on October 19.

The Ministry of Electronics and Information Technology has formed a special investigation team involving officials from the Controller of Certifying Authorities , the Indian Computer Emergency Response Team , the Aadhaar, and the National Payments Corporation of India .

Meanwhile, eMudra has decided to exit the global SSL and TLS certificate business, which contributes about 1% of its global revenue.

The company said its regulated digital signature certificate and e-sign businesses remain unaffected, while no customer certificates were issued using the compromised keys.

The Centre has barred sugar mills and distilleries from producing ethanol from sugarcane juice, syrup and B-heavy molasses during the 2026-27 ethanol supply year.

It's like, you know, oh, wow, we created a loneliness crisis? What about talking to your AI agent? Yeah.

The best part that I've seen about this is that there's this Indian company called E, like lowercase e, Mudra, and they issue digital certificates.

Basically, when you see the little lock on the URL to show that it's like officially the encrypted, you know, verified, it's how your web browser knows if it's a genuine website or not.

Apparently each one of those is supposed to be protected by like an encrypted secret key that can be Dozens, if not over 100 digits long.

We should mention Emundra key.

Emudra.

Emudra? Is that how you say it? Emudra?

Emudra, yeah.

Do you remember? Yeah, anyway.

This whole thing reminds me of a story I used to bring up like 10 years ago in the 617 YRS class when we were talking about certificate authorities that were trusted with Windows and how ridiculous it was.

We should mention Emundra keys.

Emudra.

Emudra.

Is that how you say it? Emudra.

Emudra.

Yeah.

Do you remember? Yeah.

We should mention Emundra key.

Emudra.

Emudra? Is that how you say it? Emudra?

Emudra, yeah.

Do you remember? Yeah, anyway.

This whole thing reminds me of a story I used to bring up like 10 years ago in the 617 YRS class when we were talking about certificate authorities that were trusted with Windows and how ridiculous it was.

We should mention Emundra keys.

Emudra.

Emudra? Is that how you say it? Emudra?

Emudra, yeah.

Do you remember? Yeah, anyway.

This whole thing reminds me of a story I used to bring up like 10 years ago in the 617 wireless class when we were talking about certificate authorities that were trusted with Windows and how ridiculous it was.

It says that Japan's Amane suspended all desktop cloud plans after malware was found on customer servers.

India's eMudra had eight website certificate keys so weak, one was literally the number four.

State Bank of India confirmed that 3,897 customer records are on the dark web.

Criminals used AI agents to break in 400 Latin American banks.