Microsoft removes seven eMudhra certificates from Windows

Microsoft released a Windows security update that removes seven certificates tied to India's eMudhra. The private keys for eight intermediate certificates were found to be weak enough to recreate, letting attackers forge certificates and impersonate legitimate sites. Microsoft blocked the affected certificates on October 20, and Edge gets a similar change on October 27.

• Seven eMudhra certificates removed from Windows
• Weak keys for eight intermediate certificates enabled forgery
• Affected certificates were blocked on October 20
• Edge update with the same change arrives October 27