🧰 Certificate Transparency logs

The items that name it 10

• eMudhra, Brotli, and the Long Tail of a Security Fix
  article2026-10-26It is written here as Certificate Transparency logs: Mozilla found no certificates from the intermediates in them at disclosure; not all clients require logging.
• EMudhra Intermediate CA Certificates Compromised
  advisory2026-10-22It is written here as Certificate Transparency (CT) logs.

  Public logs monitored for unauthorized certificates issued for registered domains

• eMudhra CA compromise: eight private keys, and one of them is 4
  article2026-10-22It is written here as Certificate transparency logs (enforced by Firefox, Chrome, Edge and Safari).

  enforced by Firefox, Chrome, Edge and Safari

• Your MCU likely escaped the eMudhra intermediate CA compromise
  article2026-10-21It is written here as Certificate Transparency (CT) logs: public logs of issued certificates, required by major browsers, with no entries for the compromised intermediates since April 2025.

  CT

• Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
  article2026-10-21It is written here as Certificate Transparency (CT) logs: public logs checked for malicious use of the keys before revocation; none appeared, but not all clients enforce CT.

  CT

• Google Domains Impacted by Recent ccTLD Hijacks
  article2026-10-09It is written here as Certificate Transparency (CT) logs.

  Used by Google to analyze and discover that multiple other organizations were affected by unauthorized certificates issued during the hijacks

• Chrome's Response to Recent ccTLD Registry Hijacks
  article2026-10-06It is written here as Certificate Transparency (CT) logs.

  public logs of certificate issuance, monitored to reveal additional organizations impacted by the attacks and recommended for ongoing domain monitoring

• Socket: 737 Malicious VPN/Proxy Chrome Extensions Impersonate 66 Brands
  writeup2026-08-12

  Used by Socket to date the earliest issuance of certificates in the threat actor's infrastructure (xray[.]myxavpn[.]com, 2024-11-06)

• Hacking Google with A.I. for $500,000
  writeup2026-06-11

  Used to discover additional Google API domain names

• Orca Security: Critical Coder Signature Bypass Exposes Developer Keys and Tokens
  advisory2026-05-22It is written here as Certificate Transparency logs: public source of legitimate Azure IMDS certificates used in the forged envelope.