The Internet goes on high alert after discovery of 8 compromised TLS certs

Security personnel worldwide went on high alert after the discovery of eight TLS intermediate certificates with private keys so weak that anyone could mint trusted browser and app credentials for any site on the Internet. By late Tuesday morning, browser makers and some major apps and programming languages had blocked all eight intermediates; no exploitation has been reported. It matters because weak keys at the certificate-authority layer could have enabled undetectable impersonation of any website — a rare internet-scale trust emergency.

• Ars Technica2026-10-20 19:47