GoKawiileMudhra-issued intermediate CA certificates found with crackable private keys
Security researchers discovered that Indian certificate authority eMudhra issued six TLS and two code-signing intermediate certificates whose private keys were weak enough to be guessed or recovered. An attacker exploiting this could impersonate trusted websites such as banks or tech firms, or sign malware to appear as legitimate software from companies like Microsoft or Google. The affected certificates now need to be revoked and removed from trust stores across operating systems and browsers.