The global internet security system faced an unprecedented threat after experts discovered eight TLS certificates with critically weak private keys. The incident, affecting the infrastructure of Indian certification authority eMudhra Limited, put user data privacy at risk worldwide. The issue came to light following the publication of a warning signed with the key of one of the compromised certificates, confirming that unauthorized individuals had gained full control over them.
Scale of the Problem and Technical Details
Cybersecurity experts compared the discovered vulnerability to the historical Heartbleed glitch of 2014. Cryptographic engineer Filippo Valsorda noted that complete remediation will require massive effort and a significant amount of time. Technical analysis revealed astonishing weakness in the keys: instead of standard hundreds of bits, they ranged from just 3 to 8 bits in size, essentially boiling down to prime numbers such as 4, 56, or 237. Experts suggest that test code accidentally released into the production environment may have caused this gross error.
Risk Zones and Developer Response
The leak poses the greatest danger to VPN service users, especially in regions with active traffic interception. Attackers need the ability to intercept connections to carry out an attack, which is easiest to achieve on public Wi-Fi networks. As of Tuesday, October 21, 2026, developers of leading browsers and software promptly blocked all eight problematic certificates. Meanwhile, certificate transparency logs currently contain no evidence that hackers have actually exploited the vulnerability for attacks.
Infrastructure Consequences and Protection Prospects
Prompt certificate blocking does not mean an instant solution, as updating the entire global internet infrastructure will take a long time. Popular messengers like Signal and WhatsApp, as well as the Wireguard protocol, avoided the threat because they do not rely on standard TLS certificates. In the current situation, regular users are advised to temporarily refrain from using unsafe applications and ensure the installation of the latest security updates across all their devices.
