The issue is related to the SHA-1 algorithm not being collision resistant, making it easier for attackers to conduct spoofing attacks. This has been demonstrated by attacks on the use of SHA-1 in TLS 1.2. The SHA-1 algorithm is likely present in a large number of products across the entire IT sector.