eMudhra appoints KPMG as independent reviewer, Microsoft removes seven certificates, Illumen reports about 30,800 issued under affected G3 hierarchies
- Urgency
- L4
- 64
- 80
- 40
- 30
- 85
At a glance
eMudhra announced the appointment of KPMG as an independent external reviewer following the incident that led to distrust of select TLS intermediates. On October 26, Microsoft released an out-of-band Windows update that removes seven certificates associated with the affected hierarchies. An October 28 update cited by a security bulletin reports about 30,800 certificates were issued under the affected G3 hierarchies for a US customer ecosystem.
- eMudhra hires KPMG; Microsoft removed seven certificates on October 26; third-party reporting cites about 30,800 certificates issued under affected G3 hierarchies.
CHRONOS Wire · October 30 · Alert 6
What happened
eMudhra has hired KPMG to independently review a certificate security incident. Microsoft removed seven affected certificates from Windows trust on October 26. A third party reports about 30,800 certificates were issued under the affected G3 hierarchies for a US customer ecosystem.
Why it matters
Independent review may clarify scope and root cause while vendor trust removals and reported issuance counts could require immediate inventory and certificate replacement actions for affected ecosystems.
What Changed
eMudhra announced the appointment of KPMG as an independent external reviewer. Microsoft released an out-of-band Windows update on October 26 that removes seven certificates associated with the affected hierarchies. Third-party reporting, citing an October 28 update, states about 30,800 certificates were issued under the affected G3 hierarchies for a US customer ecosystem.
What Is Genuinely New
eMudhra publicly announced the appointment of KPMG as an independent external reviewer of the incident.
CHRONOS Bottom Line
eMudhra has engaged an independent reviewer; vendors have begun trust removals and independent reporting suggests a potentially large number of issued certificates that may increase remediation scope if validated.
Detailed Analysis
eMudhra has engaged an independent external reviewer, which is a governance and forensic step. Microsoft has already issued a Windows update removing seven certificates from the Windows trust list. Independent reporting cites an October 28 update that about 30,800 certificates were issued under the affected G3 hierarchies for a US customer ecosystem; if validated, that could increase remediation scope and workload for impacted organizations.
U.S. Impact
U.S. Impact assessment pending.