GoKawiileMudhra CA compromise largely spares microcontroller-class IoT devices, analysis finds
A security researcher examined the fallout from the eMudhra Intermediate CA compromise disclosed on October 20, 2026, which prompted warnings from figures like Russ Cox and Scott Helme that IoT and embedded devices unable to update could be permanently vulnerable to man-in-the-middle attacks. The analysis argues that while single-board computers running full operating systems like Linux are indeed at risk and need updates, true microcontroller (MCU)-class devices generally are not directly affected because of how they handle public key infrastructure and certificate bundles.