October 22nd, 2026

Aurascape confirms that its platform and customer traffic were not directly impacted by the recently disclosed eMudhra certificate authority security incident.

On October 20, 2026, security researchers and major browser providers publicly disclosed a security issue involving eight compromised eMudhra intermediate certificate authority (CA) private keys.

Following an internal security assessment, Aurascape has confirmed that our platform was not directly affected by this incident due to our pass-through proxy architecture.

We are continuing to evaluate additional measures that could help customers protect against the broader risks associated with compromised certificate authorities.

Understanding the eMudhra Incident

The incident involved eight eMudhra intermediate CA certificates whose private keys were generated with insufficient cryptographic randomness.

This weakness could allow attackers to recover the private keys and generate fraudulent digital certificates that appear legitimate to systems trusting the affected certificate authorities.

Under certain circumstances, attackers could use these certificates to impersonate legitimate websites, potentially intercepting or manipulating encrypted communications.

Major browser providers, including Google and Mozilla, have taken steps to distrust the affected certificates and prevent their use in fraudulent connections.

Aurascape’s Security Assessment

Aurascape’s platform and customer traffic were not directly impacted by the eMudhra incident.

Aurascape has completed an internal security assessment and system inventory, confirming that none of our systems use the compromised eMudhra certificates. As a result, Aurascape’s platform and services were not impacted by this incident.

The broader certificate trust issue may still affect endpoint devices, applications, or other systems that independently trust the compromised certificate authorities.

Recommendations for Organizations

Organizations should review their certificate trust configurations and follow the latest guidance from their operating system, browser, and infrastructure vendors.

Recommended actions include:

• Apply relevant operating system, browser, and certificate trust store updates. 

• Ensure affected eMudhra certificate chains are no longer trusted. 

• Review applications that use embedded or independently managed certificate trust stores. 

• Verify that TLS certificate validation and revocation mechanisms are properly enforced. 

• Investigate suspicious certificate validation activity where appropriate. 

Our Commitment to Customer Security

Aurascape remains committed to helping organizations secure their environments as emerging threats evolve.

Although our platform was not directly impacted by the eMudhra incident, we recognize the importance of understanding the potential risks to customer environments.

Our engineering team continues to evaluate additional protections and will provide further guidance as appropriate.

References

• Mozilla Security: eMudhra Certificate Compromise 

• Red Hat: eMudhra Certificate Compromise Advisory 

• Go Vulnerability Database: CVE-2026-111943