Do Son Security enthusiasts minted 106,000 eMudhra rogue certificates for Google domains after researchers uncovered trivial private keys in intermediate CAs.
Certificate Transparency
A ccTLD registry hijack of .gh, .sl, and .as let attackers obtain rogue TLS certificates. See how Chrome responded and how to check yours.
Cloudflare’s 1.1.1.1 was hit by 12 unauthorized certificates from Fina CA, raising PKI concerns and spotlighting Microsoft’s continued trust.
Three anomalous TLS certificates were improperly issued for Cloudflare’s 1.1.1.1 DNS. The certificates were trusted by Microsoft and went undetected for months.