National CERT Warns of Compromised eMudhra Keys

Pakistan's National CERT has warned that eight compromised eMudhra keys could let attackers create fake digital certificates, impersonate trusted websites and intercept online communications. The warning is an advisory about what could happen, not a confirmed attack.

Organisations have been urged to update security systems and block the affected certificates. No malicious exploitation had been publicly confirmed at the time of the advisory.

What the eMudhra keys warning asks organisations to do

The risk named in the advisory is fake certificates, impersonation of trusted websites, and interception of online communications. The requested response is to update security systems and block the affected certificates. The advisory does not say that this misuse has already been seen in public.

Our verdict

Eight eMudhra-linked security keys are compromised, and National CERT says they could be used for fake certificates and intercepted traffic. The public record at the time of the warning did not confirm that this had already been exploited, and organisations are being told to update systems and block those certificates.

Follow for more updates.