According to CoinMeta, as reported by bitcoin and news, eight TLS certificates issued by emudhra in India have been found to have extremely weak private keys, allowing attackers to impersonate almost any website. Major browsers have already blocked the affected certificates, but millions of servers, Linux systems, and connected devices may still need to be updated. A cryptography expert warns that the scale of this cleanup could exceed that of the Heartbleed vulnerability in 2014, and no malicious exploitation has been confirmed yet.