The Internet goes on high alert after discovery of 8 compromised TLS certs

Security teams scrambled after discovery that eight intermediate TLS certificates issued by India-based eMudhra had disastrously weak private keys, enabling anyone with the keys to mint browser-trusted credentials for arbitrary sites. The compromised intermediates were proven controllable when an advisory signed with one of the keys appeared on a public site. Private keys were orders of magnitude smaller than the expected ~384-bit NIST P-384 size, with the reported values shown as 4, 56, 66, 115, 155, 156, 230, and 237 (instead of hundreds of bits of entropy), a failure engineers called “bonkers” and possibly the result of leaked example code or a broken key-generation interface. Major browsers and many apps and languages immediately blocked the eight intermediates (Edge lagged in some cases), and certificate transparency logs show no confirmed malicious issuance so far.

The operational fallout resembles and in some ways exceeds Heartbleed: revoking and replacing trust anchors, patching Linux distributions, updating embedded and IoT devices, containers, and off-path tooling will take months or years and leave a long tail of vulnerable systems. Exploitation requires an active man-in-the-middle to intercept and re-encrypt traffic, raising acute risk for VPN users and anyone on untrusted networks. The incident highlights that TLS’s strength depends on every certificate authority and that detecting misuse relies on active monitoring of massive certificate feeds, while remediation demands coordinated updates across highly heterogeneous ecosystems.