8 Root Certificate Authorities reportedly exposed, private key was literally the number 4
lucasmeijer · x · 2026-10-21
Developer Lucas Meijer flags a startling security discovery: private keys for 8 root Certificate Authorities have been found, and one of the keys was literally the number 4.
Root CAs sit at the top of the TLS trust chain, so compromised private keys could in theory allow forged signatures that bypass the entire system. The post lacks full details and provenance, but the absurd weakness of the key raises serious questions about the affected certificate infrastructure.
More from Safety
- Black October: LiteLLM credential stealer, npm worm and thousands of poisoned GitHub workflows — AIFlow_ML · 2026-10-23
- Two unpatched 9.0/10 RCE flaws hit Linux's in-kernel SMB server KSMBD — emax · 2026-10-23
- FDA crosses a regulatory watershed with personalized neoantigen cancer vaccine, per Gottlieb — alex_peys · 2026-10-23
- Abliterated GLM-5.3 or DS V4.1 Flash plus compute lets motivated individuals do anything, argues viral thread — khademinori · 2026-10-23
- AI uncovers PHP2Shell flaw threatening the tech behind 70% of all websites — AIFlow_ML · 2026-10-23
- Ben Murphy on this week's cyber events: deployment models and open-source risks — herbiebradley · 2026-10-23