Weak Private Key Strength in 8 TLS Certificates Issued by eMudhra Allows Attackers to Impersonate Nearly Any Website

Eight TLS certificates issued by India's eMudhra have been found to have extremely weak private keys, allowing attackers to potentially impersonate nearly any website. Major browsers have blocked the affected certificates, but millions of servers, Linux systems, and connected devices may still need updates. A cryptography expert warns that the scale of this cleanup could exceed that of the Heartbleed vulnerability in 2014, and there is currently no confirmation of any malicious exploitation.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.