Internet panics after 8 eMudhra private keys get cracked
Summary
Eight eMudhra certificate-authority private keys were compromised after apparently being generated as tiny, guessable numbers. Researchers say the keys could enable forged certificates that impersonate websites and intercept or alter traffic. Browser makers quickly blocked the certificates, and eMudhra revoked them; fixes were also released for several software ecosystems. Some non-browser tools may not check revocation, leaving potential exposure for exchange bots, trading scripts and wallet backends. No crypto-related or user attacks have been reported, and the cause remains unclear, though eMudhra reportedly blamed a bug in its key-setup script.
