Source: Featured Blogs - Forrester
eMudhra's compromised private key reveals that even specialized certificate authorities lack basic operational security controls, likely relying on outdated infrastructure and insufficient access restrictions. When a CA's key is breached, attackers can impersonate any website or service that relied on eMudhra's trust. This affects enterprises across financial services, government, and tech that outsourced their PKI to cut costs. The incident exposes a gap: their third-party trust infrastructure may be maintained by vendors with security practices no better than the enterprises they're meant to protect.