🚨 MAJOR HTTPS COMPROMISE 🚨

Eight security certificates issued by India-based eMudhra were found to have private keys so weak that attackers could potentially impersonate virtually any website.

Some private keys were so weak it was like protecting the Internet with a two-digit PIN instead of a nearly impossible-to-guess password.

These certificates are supposed to prove that websites are legitimate and connections are secure.

Major browsers have already blocked the affected certificates, but millions of servers, Linux systems, and connected devices may still need updates.

One cryptography expert warned the cleanup could be “bigger than Heartbleed,” the massive 2014 Internet security vulnerability.

No malicious exploitation has yet to be confirmed. #cybersecurity