The private keys of 8 TLS certificates issued by eMudhra are extremely weak, and attackers may be able to impersonate almost any website

Odaily reports that Bitcoin News posted on X platform stating that 8 TLS certificates issued by India's eMudhra were found to have extremely weak private keys, which attackers could exploit to impersonate almost any website. Major browsers have blocked the affected certificates, but millions of servers, Linux systems, and connected devices may still need updates. A cryptography expert warned that the scale of this cleanup effort could exceed the 2014 Heartbleed vulnerability, and no malicious exploitation has been confirmed yet.