Indian Digital Certificate Authority eMudhra Private Key Leak May Threaten Security of Cryptocurrency Trading and Other Systems
Indian digital certificate authority eMudhra had a flaw in its key setup script that caused it to use extremely weak values as private keys, resulting in the compromise and exposure of eight private keys. Attackers can exploit forged digital certificates to impersonate trusted websites and carry out man-in-the-middle attacks to steal or tamper with data.