Microsoft blocks trust in compromised eMudhra certificates
Oct 27, 2026 · Summarized by Fundy Tech from BleepingComputer
Microsoft released out-of-band Windows updates to remove trust in certificates tied to compromised eMudhra keys. The fix is for systems that do not get automatic certificate trust updates.
Key points
- Updates apply to Windows 11 24H2, 25H2 and 26H2, and Windows 10 21H2 and 22H2.
- Eight eMudhra intermediate keys were found to be weak and easily recovered.
- Microsoft is removing seven certificates from Windows trust lists.
- The change helps protect offline systems and devices with trust updates disabled.
Why it matters
If your business runs Windows devices that rarely go online, this matters now. Compromised certificate trust can let attackers spoof websites or intercept encrypted traffic. Updating reduces that risk on disconnected or tightly managed systems.
Who’s affected: Offline Windows systems using eMudhra-trusted certificates
What to do
- Install the Windows update on disconnected or managed systems.
- Review certificates that depend on the removed roots.
- Replace any affected certificates as needed.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.