Indian certificate authority eMudhra had 8 weak secret keys compromised, prompting emergency browser fixes. A researcher reported on Oct. 17 that eMudhra, which issues digital certificates to vouch for websites, used tiny integers (like 4, 56, 115) as private keys instead of strong random numbers. This vulnerability allows attackers to forge authentic-looking certificates for any website. Browser makers like Mozilla, Chrome, Apple, and Microsoft have since rushed out emergency fixes, with Mozilla blocking the certificates within three hours of the report. Crypto users are also advised to be cautious, as exchange bots, trading scripts, and wallet backends could be vulnerable to forged certificates, though no crypto attacks have been reported so far. Fixes are available for Go, Python's certifi package, and Rust's webpki-roots, while Node.js is still pending.