Skip to content

Endpoint & devices

Windows and Edge drop 7 eMudhra roots after CA key compromise

Microsoft released an out-of-band Windows update on 26 October 2026 and changed the Microsoft Edge trust list on 27 October to stop trusting seven eMudhra certificates, after eight eMudhra intermediate CA private keys were compromised. Endpoint and PKI admins must make sure these trust-list updates reach every device and replace any certificate that chains to the removed roots.