bunny.net pulls an Armenia CDN node after its hosting provider is breached and reissues TLS certificates
Teaser from the source
On Oct 28 2026, CDN company bunny.net said one of its infrastructure providers reported unauthorized access involving third-party server management software. One bunny.net CDN node, in Armenia, ran on a server from that provider. bunny.net stopped routing traffic through it within 20 minutes, wiped it and removed it for good. Neither bunny.net nor the provider has found evidence the node was accessed, but bunny.net can't rule it out; if it was, cached CDN content, Pull Zone configurations and TLS certificates stored on that server could have been exposed. bunny.net revoked and reissued certificates for its own b-cdn.net and bunny.run domains and is reissuing managed custom-domain certificates with new private keys, expected to finish by the end of Oct 31. It says no account data was on the server and no internal systems were affected.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on certificates
Other advisories
- Not ratedosv:CLEANSTART-2024-TQ32856When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys
- Not ratedosv:CLEANSTART-2024-DF62846X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain
- Not ratedosv:CLEANSTART-2024-RF43952If certificates that signed grub are installed into db, grub can be booted directly
- Not ratedosv:CLEANSTART-2026-IX31999OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys
- Not ratedosv:CLEANSTART-2026-MR22525During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions
- Not ratedosv:CLEANSTART-2026-CW26655Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
- Not ratedosv:CLEANSTART-2026-WY72459attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks
- Not ratedosv:CLEANSTART-2026-CG37664On most platforms, Go uses the given system root certificates
Other news entries
- Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate AuthoritiesNewsCisco PSIRT
- TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of DevicesNewsSecurityWeek
- Microsoft releases Windows OOB updates to distrust eMudhra certificatesNewsBleepingComputer
- GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session DecryptionNewsThe Hacker News
- Red Hat Enterprise Linux ca-certificates: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenVulnerabilityBSI CERT-Bund
- Compromised TLS CertificatesNewsSchneier on Security
- eMudhra quits global TLS certificate market after compromise of CA signing keysNewsCSO Online
- Red Hat Enterprise Linux ca-certificates: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenVulnerabilityBSI CERT-Bund
Source: https://pwn.watch/i/bunny-net-armenia-cdn-node-provider-compromise-oct-2026