The Internet goes on high alert after discovery of 8 compromised TLS certs
https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/Open linkView original on piefed.caSyndicated from the fediverse. Read and engage on the original instance.
View original on piefed.cahttps://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/Open linkView original on piefed.ca
3 replies
Ah yes, the programming languages blocked the certificates
almost certainly means their package managers won't download dependencies over https using those certs.
in fact, there's a link right there in the article with a list, and sure enough it's package managers like pip as well as libraries like rustls-webpki: https://ifin.network/t/emudhra-intermediate-certificates-compromised/909
It is bad but not quite heartbleed bad