The Internet goes on high alert after discovery of 8 compromised TLS certs
Summary
Ars Technica reports on a critical TLS security incident: eight intermediate certificates from the India-based certificate authority eMudhra have private keys so weak that they could enable attackers to mint trusted credentials for any site. Browsers and some major apps have blocked these certificates, but a broad remediation scope remains, including patching Linux distributions and embedded devices. The piece emphasizes the potential impact across VPNs, IoT, and legacy systems and features expert warnings that the cleanup could be extensive and slow.