Following the discovery of the trivial keys on October 19, 2026, Cloudflare deployed rapid updates across critical systems like its Pingora proxies to outright reject the compromised intermediate certificates. The provider used AI-assisted source code reviews to identify affected touchpoints and logged roughly 22,000 handshake attempts that used the leaked keys. Approximately 160 of these connections brandished unauthorized certificates for external entities, such as consumer IoT domains, bearing validity periods longer than two years.
Key points
An unreleased script configuration error caused eMudhra to completely withdraw from opera…: An unreleased script configuration error caused eMudhra to completely withdraw from operating as a public certificate authority.
Clients lacking Certificate Transparency enforcement remain vulnerable to domain spoofing…: Clients lacking Certificate Transparency enforcement remain vulnerable to domain spoofing from certificates generated using the exposed keys.
Lingering questions persist surrounding how external auditors, cross-signers, and monitor…: Lingering questions persist surrounding how external auditors, cross-signers, and monitoring failed to catch the weak key generation initially.
Sources checked by our analysis pipeline: 1
On October 19, 2026, we learned about eMudhra’s eight shockingly weak keys: where eMudhra was trusted to pick a 115-digit number for their virtual combination lock protecting the Internet, they picked the number 4. Not even four digits, just the number 4. The other seven keys were similarly weak: 56, 66, 115, 155, 156, 230 and 237.
The next day, we wrote a blog post on the immediate action we took to mitigate this leak, and what customers needed to do on their end to stay secure. Now, we are sharing a more in-depth follow up on the evidence we’ve seen of exploitation, and the progress seen on visitors patching their systems.
Let's start with the scale of the problem. A certificate authority (CA) with weak keys this serious is unprecedented, and the potential consequences are significant. While there have been plenty of compromised certification authorities in the past (such as DigiNotar, TÜRKTRUST, and TrustWave), access to their keys has always been contained to a degree; these incidents gave a limited set of attackers or organizations the ability to issue…
Ground teams have established communication with the experimental spacecraft following its deployment earlier this month. The mission serves as an initial testbed for operating data center infrastructure in orbit. Demonstrating early onboard computing capabilities, an integrated artificial intelligence model has already begun executing tasks from space.
Lawmakers backed the controversial levy to curb data-driven environmental impacts while raising an estimated €10 billion from large digital platforms. If enacted, major technology firms delivering high-bandwidth media could face substantial operational levies tied directly to French network usage. However, the proposal still faces steep political hurdles, including formal pushback from government officials and upcoming scrutiny in the Senate.
The milestone marks a major step in Beijing's military modernization agenda, validating the naval integration of advanced unmanned combat systems with next-generation capital ships. Operating the fixed-wing GJ-21 from a dedicated warship expands offshore strike and reconnaissance options at a reduced operational cost. This demonstration confirms the navy's growing capacity to conduct sustained carrier-style drone missions across strategic maritime theaters.