Microsoft's response to compromised eMudhra certificate authority keys

Microsoft says eight eMudhra intermediate CA private keys, six for TLS and two for code signing, could be recovered, so forged certificates could look trusted. It blocked the affected CAs through the Windows Disallowed Certificate Trust List on October 20 and an Edge/WebView2 CRLSet update. It then removed seven eMudhra-related roots from the Windows and Edge trust lists. Teams should find certificates chaining to those roots and replace them, and check offline devices. Most claims come from Microsoft's own post, without independent confirmation.