MC1526780 High
New MSRC blog: Microsoft’s response to compromised eMudhra certificate authority keys
Summary AI-generated
Microsoft responded to eMudhra certificate authority compromise by updating Windows and Edge trust lists; out-of-band updates are available for devices not auto-updating certificate trust.
Suggested actions AI-generated
- Review Microsoft blog for context and steps
- Apply relevant Windows KB update to unmanaged/disconnected devices
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1529467 Microsoft Windows: Updates to address compromised eMudhra certificate authority keys
- MC1224565 (Updated) Trust DigiCert Global Root G2 certificate authority to avoid Exchange Online email disruption
- MC1193408 (Update)Action Required: Trust DigiCert Global Root G2 Certificate Authority for using Entra services by January 7, 2026
- MC1401337 Secure Boot certificate updates for Linux on Azure virtual machines
- MC1491763 Prepare for Windows Update certificate rotation in 2027
- MC1403212 Best practices for deploying Secure Boot certificate updates
Original post from Microsoft
Microsoft has published a new blog post outlining our response to the compromise of eMudhra intermediate certificate authority keys, including changes to the Windows and Microsoft Edge trust lists.
The Windows out-of-band updates are now available in the Microsoft Update Catalog. Administrators managing disconnected devices, or devices that don’t receive automatic certificate trust updates, can find more context and recommended steps in Microsoft’s response to compromised eMudhra certificate authority keys.
The following Windows updates are now available:
- Windows 11, version 26H1: KB5134134
- Windows 11, versions 26H2, 25H2, and 24H2: KB5134133
- Windows 11, version 23H2: KB5134130
- Windows Server 2025: KB5134137
- Windows Server 2022: KB5134140
- Windows 10, version 22H2 and Windows 10 Enterprise LTSC 2021: KB5134125
- Windows 10 Enterprise LTSC 2019 and Windows Server 2019: KB5134124
- Windows Server 2016: KB5134123