# Apple blocks eight compromised certificates as engineer warns of Mac trust gap

_Published Wednesday, October 21, 2026 at 8:50 AM EDT · Security · Latest · Tier 2 — Notable_

![Apple blocks eight compromised certificates as engineer warns of Mac trust gap — Primary](https://9to5mac.com/wp-content/uploads/sites/6/2026/10/Apple-blocks-web-certificates-that-could-be-used-by-scammers-but-Mac-vulnerability-remains.jpg?quality=82&strip=all&resize=1200,628)

Apple has blocked eight compromised web security certificates, but Mozilla cryptography engineer Dennis Jackson warns that Macs may continue trusting them, 9to5Mac reported. A script error left private keys discoverable by testing just 256 possible numbers, potentially allowing website impersonation.

Apple, Google and Mozilla have blocked the certificates in their browsers, and the certificates have been revoked. Jackson says macOS's built-in curl utility may still trust them because its certificate bundle does not check revocation information. There is currently no evidence that the certificates have been used in the wild.

## Sources

- [9to5Mac](https://9to5mac.com/2026/10/21/apple-blocks-web-certificates-that-could-be-used-by-scammers-but-mac-vulnerability-remains/)

---
Canonical: https://techandbusiness.org/newswire/88EvCjw4P4M0KYFPx7vpQf
Published: 2026-10-21T12:50:32.701Z
Story chronology: 2026-10-21T12:16:19.000Z
Retrieved: 2026-10-25T06:20:33.009Z
Publisher: Tech & Business (techandbusiness.org)