What happened
India is preparing a high-level cyber audit meeting to review the PHP flaw, eMudhra's eight compromised intermediate certificates, and Cert-In's late-night advisory on frontier AI agents reaching live Indian networks.
Why it matters
Developers and SME owners must inventory PHP installs, patch or front WAFs, and drop shadow infrastructure, while eMudhra pulls out of SSL/TLS.
Remember this
India's next cyber-audit meeting has a concrete agenda: PHP, eMudhra, AI agents.
What the audit will cover
A high-level review is expected to examine three threads: the PHP flaw, the eMudhra certificate-key compromise and Cert-In's advisory on frontier AI agents reaching live Indian systems.
More context & who is affected
New Delhi is preparing a high-level cyber review and audit meeting. It will look at the PHP flaw, the eMudhra certificate-key leak and a Cert-In advisory that frontier AI agents reached live Indian networks.
eMudhra said on 22 October it is exiting the SSL/TLS certificate business. Its eight affected intermediate certificates were published after a wrap/unwrap flaw in a 30 April 2025 key-generation ceremony, went undetected for 18 months and slipped past two audits.
Google, Apple, Microsoft and Mozilla removed eMudhra from their root stores, and its shares fell roughly 40%. An official told Business Standard that SME preparedness is "very weak" — many credentials stay at the vendor default. Experts advise inventories of PHP installs, a WAF in front of unpatchable systems and no shadow infrastructure.
- Affected certificates
- 8 eMudhra intermediate certificates whose private keys were compromised and withdrawn.Business TodayReuters
- Vulnerability window
- 18 months Time the key flaw went undetected and passed two rounds of audits.Reuters
- Share price drop
- ~40% Fall in eMudhra shares over the two trading days after the flaw was disclosed.Business TodayReuters
General Public · Msme Owners
Forged certificates can impersonate any domain, so banking and login pages can be spoofed.
Developers · Business Executives
Teams must inventory PHP installs, patch or front WAFs, and stop keeping shadow infrastructure.
Business Executives · Msme Owners
eMudhra shares fell about 40% as Google, Apple, Microsoft and Mozilla dropped its root trust.
Reporting fromBusiness Today ↗Business Standard ↗Reuters ↗Cloudflare ↗
Sources & verification4 sources · 4 claims
These are the records behind this briefing. Linked reporting is not the same as independent confirmation.
- Business TodayReporting
eMudhra, PHP security scare: Govt to hold high level review, audit to assess potential damage ↗
Published Oct 23, 2026 · Accessed Oct 23, 2026 - Business StandardReporting
Govt plans cyber audit as digital fault lines emerge amid security breaches ↗
Published Oct 22, 2026 · Accessed Oct 23, 2026 - ReutersReporting
India's eMudhra exits website security business after flaws trigger global alarm ↗
Published Oct 22, 2026 · Accessed Oct 23, 2026 - CloudflareOfficial
8 eMudhra certificates are compromised. Here's what you need to know ↗
Published Oct 20, 2026 · Accessed Oct 23, 2026
Claims and linked sources
The central government is preparing a high-level review and audit meeting on the PHP flaw, eMudhra key compromise and Cert-In's AI-agents advisory.
On 22 October 2026 eMudhra announced it would voluntarily withdraw from the SSL/TLS certificate business after eight intermediate certificates were compromised.
The vulnerability came from a wrap/unwrap flaw in a 30 April 2025 key-generation ceremony, went undetected for 18 months, and passed two audits.
A senior official told Business Standard that SME cybersecurity is very weak, with many credentials left at the vendor default password.
