Shares of the Indian digital certificate authority, eMudhra Ltd, plummeted by 20 percent on Tuesday, October 21, following the disclosure of a significant security vulnerability. The sharp decline occurred after a security researcher flagged that a flaw in the company's certificates resulted in weak keys.
The researcher alleged that they discovered a flaw in eight intermediate certificates issued by eMudhra. This flaw reportedly allows for the generation of "weak keys" that could be "reverse-engineered, possibly with AI-assisted techniques," posing a substantial security risk to potentially millions of users and websites relying on these certificates for secure communication.
Crucially, the researcher reported the issue to the major root programs managed by tech giants Apple, Google, and Mozilla. If these programs decide the flaw is critical, they could distrust and revoke eMudhra's certificates, which would render them useless in major owsers and operating systems, dealing a severe blow to the company's business.
Following the news, the stock of the Bengaluru-based company plunged 20 percent to Rs 432 on India's National Stock Exchange (NSE). This immediate and drastic drop reflects deep investor concern about the potential fallout from the security each.
Certificate authorities like eMudhra play a vital role in internet security. They verify the identity of websites and organizations, enabling encrypted, secure connections (like HTTPS). A weakness in this system can be exploited by malicious actors to impersonate legitimate sites and steal sensitive user data.
eMudhra has not yet issued a formal public response to the researcher's findings. However, the company is expected to act swiftly to address the vulnerability and cooperate with the root programs to maintain its credibility and prevent further financial damage. This incident highlights the critical importance of robust cybersecurity and rigorous oversight of the internet's core infrastructure.
Source: Stock Market Reports
🌐
