Microsoft Deploys Out-of-Band Updates to Distrust Compromised eMudhra Certificate Authority Keys

Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys. The updates are designed to protect systems that do not receive automatic certificate trust updates, addressing the risk of fraudulent certificates being used for man-in-the-middle attacks, code signing, or system infiltration. The compromised CA keys, if left trusted, could be abused by threat actors to issue fraudulent certificates. Microsoft's update removes trust in these specific keys, ensuring that systems reject certificates issued under the compromised authority. The updates were released on 2026-10-27 and apply globally to Windows systems, particularly those not receiving automatic certificate trust updates. No active exploitation of the compromised keys has been reported at the time of reporting, but the updates serve as a proactive mitigation measure. Systems should apply the out-of-band updates to ensure certificate trust is properly removed and the risk of abuse is mitigated.