Protecting Firefox users following the compromise of eMudhra intermediate certificates
2026-10-31T19:23:57Z•3b0d81fa253dd3fcd9cdda6fa8aa4c807e81404cb688e364054c4f94df7343ed
FirefoxGPGMozillaPwn2OwnTLSThunderbirdVPN security auditWeb PKIcertificate authorityeMudhrain-the-wild exploitintermediate certificatesmixed contentprivate key compromiseroot store policysoftware signing
What happened
Mozilla security advisories and blog posts covering compromise of eight eMudhra intermediate certificate private keys, updates to Firefox and Thunderbird release-signing GPG keys, Web PKI root-store policy changes, responses to in-the-wild Firefox exploitation and Pwn2Own findings, mixed-content protection, and a Mozilla VPN security audit. The most urgent item concerns potentially unauthorized certificate issuance following the eMudhra key compromise.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- mozilla_security_advisories
- Record identifier
- 3b0d81fa253dd3fcd9cdda6fa8aa4c807e81404cb688e364054c4f94df7343ed
- Enrichment time
- 2026-10-31T19:23:57Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.