Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next. https://cfl.re/4dRC0Lk
Browsers dealt with this one fast. Firefox, Chrome, Apple and Microsoft blocked these certificates within days, and a good IT team will hopefully already know and be updating. The ones I worry about are smaller businesses with no IT person. They have a setup running, say software that talks to a payment provider or a partner's API, and nobody to tell them it trusts whatever list it shipped with. That list often only changes after an update, so that's where I'd expect the problems. Honestly the fix is easy, hearing about it is the hard part.