Protecting Firefox users following the compromise of eMudhra intermediate certificates
Summary
Mozilla reports a compromise of eight eMudhra intermediate certificates that could enable attackers to issue fraudulent HTTPS certificates. Mozilla blocked the affected certificates via OneCRL and released updates (Firefox 158.0.1 and ESR) to propagate protection, plus NSS root-store updates to remove the compromised root. The post emphasizes rapid response, trust, and transparency in protecting users.