About the compromised eMudhra intermediate CAs

eMudhra's eight intermediate certificate authorities were compromised, with private keys potentially allowing attackers to create fraudulent TLS certificates for any website. Apple began automatically blocking the 12 affected TLS certificates across its devices on October 19, 2026, with most users requiring no action, though Mac administrators using command-line tools may optionally remove root CA certificates from /etc/ssl/cert.pem until a future software update provides automatic blocking.