Private keys for 8 eMudhra intermediate CAs (6 TLS, 2 code-signing) are compromised, enabling attackers to mint valid-looking certificates for arbitrary domains (MITM/phishing) or signed code where trusted. Browsers pushed revocations via CRLSet/OneCRL, but clients without revocation (e.g., Go, certifi) must update releases/root bundles and remove the affected intermediates.