Microsoft broadens eMudhra distrust, forcing an enterprise-wide…UNM cyber issue diverts ambulances and cancels care across the Health…Out-of-band .NET fixes reopen October patching and require application…Frontline begins breach notifications covering government, Medicaid…
Microsoft broadens eMudhra distrust, forcing an enterprise-wide trust-store decision
Microsoft has moved beyond blocking eight weak eMudhra intermediate keys and is removing associated roots from Windows trust, while Chrome, Apple and Go are applying separate protections.
Security.io Intelligence Desk · Tuesday, 27 October 2026
Executive consequence
Weak eMudhra intermediate keys are now driving root-level distrust across major platforms. The priority is to remove residual trust without causing unmanaged certificate failures, and to prove that embedded or disconnected systems received equivalent protection.
Decision today
Inventory certificate chains using emSign ECC Root CA - G3 or AAA Certificate Services.
Read the full decision briefPrimary reporting: Microsoft Security Response Center · eMudhra · Google Chrome and Android Security Teams · Go Security Team · Apple Support
Decision intelligence, not a headline feed.Every edition ranks what security leaders should read first, assign today and monitor next.
Daily executive briefing
Security.io Daily Headlines
Five equally weighted stories: what happened and the leadership decision each creates.
UNM Health’s cyber issue produced immediate clinical disruption across a major academic health system. The priority is patient-safe continuity and evidence preservation, not premature assumptions about ransomware, data exposure or recovery.
Do today
Activate clinical downtime governance with named service owners.
Frontline’s notification phase provides materially clearer data scope but leaves supplier and population questions unanswered. Districts need person-level impact evidence, defensible notification records and independent remediation assurance.
Do today
Obtain a district-specific affected-person and data-element roster.
Oneonta’s ransomware response has moved into reopening governance. The district must prove instructional stability and clean restoration while keeping data-impact and attribution questions open.
Do today
Validate instructional, communications and safety systems before reopening.
