More than half would trust a fake website. Is yours one of them?

Cloudflare hid a test in its "Verify you are human" pages: "With 50 million probes over the last week", it found that "Up-to-date modern browsers are mostly patched", but "embedded browsers, like Android WebView, lag behind patching with 30–40% still accepting", and "Across the large networks, more than half of probes still accept the compromised chain." The cause: eMudhra "was trusted to pick a 115-digit number" for a key, and "they picked the number 4."

Source: "4 real? Tracking exploitation and patching of eMudhra’s weak keys", Cloudflare Blog, Oct 30, 2026 (Maxime Guerreiro, Rupert Carr, Miguel de Moura, Bas Westerbaan) https://blog.cloudflare.com/emudhra-patching/ Also: Dennis Jackson, "Apple's git still trusts the compromised eMudhra certificates", Oct 28, 2026, https://emudhra.we-have-a-problem.com/apple.html

Maya, the Forger, the doormen, the night shift and the doors are dramatizations; every quote and number on screen is from the sources. Cloudflare notes its test traffic includes many unconfirmed bots, and that the 160 forged certificates it saw looked like servers' own defaults, not interception.

When did you last update the apps on your phone?