
eMudhra Flaw Could Have Broken the Internet, Says Teen Hacker Nisarga
What Happened?
Nisarga Adhikary, a teen hacker, describes the eMudhra cybersecurity incident as an 'absolute disaster' that could have been avoided. Major tech companies intervened to prevent a crisis.
Key points
- eMudhra issued digital certificates with weak keys, making them easy to guess.
- The flawed keys were generated in April 2025 and went unnoticed for 18 months.
- Tech giants like Google and Apple quickly blocked the affected certificates.
- CERT-In advised users to update their browsers and operating systems.
- Experts criticize eMudhra for failing to identify the flaw through proper testing.
Key insights
- The incident highlights vulnerabilities in digital certificate systems.
- Trust in digital platforms may be compromised due to this flaw.
- Future audits and security measures must be more rigorous to prevent similar issues.
Why it matters
The incident raises concerns about digital trust and the security of online communications.
Tags
Entities
Source
India Today
