Google hacker Tavis Ormandy discovered a serious flaw that affects the Kaspersky antivirus software and the way it manages inspection digital certificates. The security firm is a trusted CA and uses its digital certificate for the traffic inspection, in this way it is able to decrypt it and analyze scanning for malicious patterns. Experts are solving a problem that disabled certificate validation for 400 million users. The experts also discovered other issues such as the way leaf certificates are cached that leverages on an extremely naive fingerprinting technique.”]
Source: https://securityaffairs.co/wordpress/55028/hacking/digital-certificates.html