Story perspectives

Unauthorized TLS Certificates Expose Millions to Cyber Threats

9/5/2025

45 8

Summary

Story summary

Unauthorized TLS certificates for Cloudflare's DNS service exposed millions to potential attacks.
Croatian CA Fina issued 12 certificates from February 2024 to August 2025 without proper authorization.
Cloudflare began investigating the issue after it was reported on September 1, 2025.
Microsoft revoked the unauthorized certificates and added them to its disallowed list.
The incident underscores vulnerabilities in the internet's trust infrastructure and CA oversight.

1 of 1

Story summary

Unauthorized TLS certificates for Cloudflare's DNS service exposed millions to potential attacks.
Croatian CA Fina issued 12 certificates from February 2024 to August 2025 without proper authorization.
Cloudflare began investigating the issue after it was reported on September 1, 2025.
Microsoft revoked the unauthorized certificates and added them to its disallowed list.
The incident underscores vulnerabilities in the internet's trust infrastructure and CA oversight.