By Rabia Noureen
Publication Date: 2026-10-27 15:10:00
Key Takeaways:
- Microsoft has released an out-of-band update following the compromise of eMudhra certificate signing keys.
- This update removes affected certificates and refreshes Windows certificate trust information.
- Organizations with offline or tightly managed devices should verify that endpoints receive the updated trust list.
Microsoft has released an out-of-band update for Windows after the compromise of certificate signing keys belonging to eMudhra, which is an Indian certificate authority. This incident raised concerns that attackers could potentially create fraudulent certificates or sign malicious content that would appear trustworthy to Windows devices.
To protect customers, Microsoft removed affected certificates from its trust infrastructure. However, systems that cannot connect to Microsoft’s certificate update service, or those with automatic certificate trust list (CTL) updates…
