Insecure TLS certificates will be ‘a massive cleanup job’ for system admins.

Eight certificates issued by India-based eMudhra have been compromised, theoretically allowing attackers to spoof trusted browser and app credentials. Cryptography engineer Filippo Valsorda told Ars that the number of affected devices means it’ll take longer to clean up than Heartbleed, an infamous OpenSSL vulnerability that rocked the internet in 2014 and took years to fix. [Link: The Internet goes on high alert after discovery of 8 compromised TLS certs | https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/ | Ars Technica]