Trusted intermediate CA 'leaks' private key — it was literally the number 4
evilsocket · x · 2026-10-21
A trusted intermediate certificate authority's 384-bit ECC private key has been exposed — and the key is almost entirely zeros, ending in just "4". Anyone could derive it and forge certificates signed by this CA, a severe break in the TLS chain of trust.
More from Safety
- PHP remote control vulnerability hits back to PHP 5, agents poised to weaponize it fast — MarcJSchmidt · 2026-10-21
- SOC Prime launches free LogTotal tool as LLMs hit guardrails on security log analysis — cyb3rops · 2026-10-21
- Ampersand's Persimmon user model cuts models' evaluation awareness by 40 points — alexisjross · 2026-10-21
- Zvi: Anthropic still doesn't understand why its leaked draft AI bill was unacceptable — TheZvi · 2026-10-21
- AI Recipe Slop Networks Monetized via Russian and Chinese Ad Tech — lilyraynyc · 2026-10-21
- Anthropic used Claude to autonomously shrink attack surfaces across 25 major OSS codebases — chrisrohlf · 2026-10-21