QUANTUM THREAT INTELLIGENCE

eMudhra CA Private Keys Were Guessable: Eight Intermediates Revoked, Check the Trust Stores on Your Devices

Eight intermediate certificates from the certificate authority eMudhra, chained to roots trusted by Apple, Google, Microsoft and Mozilla, were issued with private keys so small anyone could recover them from the public certificate in under a second and forge a certificate for any domain. They were revoked on October 18, 2026, browsers blocked them within two days and Mozilla removed the root; Cloudflare published its incident report on October 20. Browsers fixed this with a switch, but routers, OT gateways and management appliances in Canadian infrastructure carry trust stores set at commissioning, and those need to be checked by hand.

SOURCE

Cloudflare

DATE

October 20, 2026

Why this matters for your infrastructure

Every advance in quantum computing shortens the window for migrating long lived infrastructure off quantum-vulnerable encryption, and data captured today can be decrypted later. Fabric Networks helps energy, government, telecom and community networks move to quantum-safe encryption on their own timeline, not an adversary's.