Security Flaw in Indian Firm’s Certificates Poses Major Internet Risk

NEW DELHI: A significant security vulnerability has been uncovered involving eight compromised certificate authority keys from the Indian company eMudhra, raising alarms about the integrity of internet security. Security researcher known as “Wayne” discovered the flaw on October 17, revealing that the private values of these keys were weak enough to be recovered almost instantly by malicious actors.

Wayne demonstrated the severity of the breach by successfully signing a message with each of the compromised keys, highlighting the potential for widespread exploitation. Experts in cybersecurity have warned that the cleanup process from this incident could take longer than the infamous Heartbleed crisis of 2014, which had far-reaching implications for internet security.

This vulnerability poses a grave threat to users and organizations relying on secure communications, as it undermines trust in digital certificates that authenticate websites and services. The implications could extend beyond individual users, potentially affecting businesses and governments that depend on secure online transactions and communications.

In response to this alarming discovery, cybersecurity experts are urging immediate action to revoke the compromised certificates and implement stronger security measures. Ongoing investigations are expected to assess the full extent of the breach and develop strategies to prevent similar incidents in the future.