Eight TLS certificate private keys issued by eMudhra have been found to be extremely weak, potentially allowing attackers to impersonate virtually any website

Odaily: Bitcoin News posted on X that 8 TLS certificates issued by India's eMudhra were found to have extremely weak private keys, which attackers could exploit to impersonate virtually any website. Major browsers have blocked the affected certificates, but millions of servers, Linux systems, and internet-connected devices may still require updates. A cryptography expert warned that the scale of this cleanup effort could exceed the 2014 Heartbleed vulnerability. No malicious exploitation has been confirmed yet.