Global cybersecurity infrastructure faces multiple critical incidents

October 21 marked a significant period of simultaneous cybersecurity crises across various layers of digital infrastructure. Major technical alerts were issued regarding digital certificate systems, banking, programming languages like PHP, GitLab repositories, Node.js environments, AI connection libraries, cloud platforms, and content delivery networks.

In India, the digital certificate provider eMudhra faced a major security breach where eight secret keys for intermediate certificates were found to be extremely weak. Some keys were as simple as single digits, such as the number 4, rather than the required high-bit random values. Cloudflare noted that these compromised keys could allow attackers to create fraudulent certificates for any domain, potentially enabling the interception or modification of data. This vulnerability affects over 60 million digital certificates issued by the company.

Additionally, the State Bank of India (SBI) confirmed a data incident involving 3,897 customer records. The compromised information includes personal details such as phone numbers, dates of birth, home addresses, emails, and loan profile data.