A company that vouches for websites had secret keys so weak that 8 of them were cracked

The internet has been scrambling to patch a hole in the system that tells your browser which websites are real. It started on Oct. 17, when a researcher told browser makers that eight secret keys at eMudhra, an Indian company that vouches for websites, have been compromised. A researcher named Wayne reported the security flaw and to prove the vulnerability, he used all eight compromised keys to digitally sign his warning message: "We have a problem here – Wayne." Browser makers and software developers have pushed out emergency fixes since then.

Source: CoinDesk