Tech

Apple blocks web certificates that could be used by scammers, but Mac vulnerability remains

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 21/10/2026, 12:20:23 UTC.

Briefings

Apple blocked eight web security certificates potentially used by scammers to impersonate legitimate sites. A cryptography engineer warned that macOS may continue trusting these compromised certificates because the operating system does not check for revocation status, leaving a security gap.

Key points

• Apple blocked eight web security certificates that could have been used by scammers to impersonate legitimate websites.
• macOS does not check for certificate revocation status, potentially allowing continued trust in compromised certificates.

Context

This finding highlights a critical security gap where Apple's blocking measures do not prevent scammers from using revoked certificates, as macOS lacks revocation checking capabilities.

Limitations

Evidence is limited to the specific eight certificates blocked and the engineer's warning; no dates of revocation, specific scammers identified, or full scope of affected certificates are provided.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 21/10/2026, 13:02:43 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeigexir7cymj3ckxlcpbrefo2p7ryehbofwpoiatbe5pqh7252ernu