New Delhi, Oct. 21 -- Google, Apple and Mozilla have blocked eight digital certificates issued by Indian certificate authority eMudhra after researchers discovered dangerously weak private keys that could allow attackers to impersonate websites.

The security incident came to light on October 17, 2026, with Cloudflare confirming on October 19 at around 17:00 UTC that the compromised keys posed a serious risk to internet security.

The vulnerability would enable hackers to produce fake certificates for any domain and possibly to hijack or manipulate Internet traffic. Major browsers, operating systems and internet infrastructure providers trusted the certificates.

Cloudflare and other tech firms have implemented emergency patches to mitiga...