CVE-2026-111943: Compromised intermediate certificate authority discovered
keks24 · hn · 2026-10-22
Hacker News discussion of CVE-2026-111943, a compromised intermediate certificate authority. A breached intermediate CA can allow attackers to issue trusted certificates for arbitrary domains, enabling man-in-the-middle attacks; typical response involves browser/OS vendors distrusting the CA and revoking affected certificates. See the NVD entry and thread for details on the affected authority and remediation.
More from Infra
- Dev shows off self-built infra stack — HTTP clients, attention kernels, model routers — to quit dependencies — wavefnx · 2026-10-22
- Can a $100 MacBook Pro M2 24GB serve local LLMs for Home Assistant? — Ejo2001 · 2026-10-22
- Tune your threshold before adding an LLM judge: optimal escalation rate was 0% — Reasonable_Royal_621 · 2026-10-22
- Where your $20 Claude subscription goes: an interactive AI value-chain explainer — aishashok14 · 2026-10-22
- llama.cpp WebGPU adds Q2_0 support, Ternary Bonsai prefill jumps ~50x to 2000 t/s — pmttyji · 2026-10-22
- AI's hidden storage bill: an 8-second video leaves 500MB behind — MIT Tech Review AI · 2026-10-22