eMudhra, an Indian certificate authority, has had 8 private security keys compromised with half the internet is cooked
The keys were incredibly weak. One of them was literally just “4”
The keys could have been used to create fake HTTPS certificates and make malicious websites appear legitimate.
Chrome, Firefox, Apple and Microsoft have blocked the affected certificates. Older devices, software and apps may still need updates.