How PKI Trust Gets Broken: Attacks and Defenses | Joshua Moses | Cybertrace Foundation

Understanding the threats so you can defend against them. Key compromise, CA misissuance, the rogue root that enables silent interception, and the defensive controls that limit each. Joshua Moses | Cybertrace Foundation | PKI and Digital Certificates | Video 24 of 32 WHAT YOU WILL LEARN IN THIS VIDEO • The attacker's view of PKI: the certificate that lets them impersonate, decrypt, or sign • Key compromise, why it is the worst case, and exactly what it forces you to do • CA compromise and misissuance, and the historical events that reshaped the web PKI • The interception problem, and how a rogue trusted root enables silent decryption • Weak algorithms, and the certificates that outlived their own security • Misconfiguration as attack surface: over-broad usage, excessive validity, and poor key protection • Enterprise CA abuse as a privilege-escalation path, at a defensive awareness level • The defensive lessons: transparency, monitoring, constrained issuance, and hardware key protection HANDS-ON LAB EXERCISE In the lab, demonstrate how a rogue root in the trust store enables interception, then remove it and confirm the fix. WHO THIS VIDEO IS FOR Built for system and network administrators, security analysts, DevOps and cloud engineers, and anyone who has ever clicked past a certificate warning and wanted to actually understand what it was telling them. ABOUT THE SERIES This is video 24 of the PKI and Digital Certificates course from Joshua Moses | Cybertrace Foundation. Every video teaches at an intermediate level while staying understandable to someone starting from zero, builds on the same lab and the same validation checklist from start to finish, and ends with a hands-on exercise you work yourself. This 32-part series takes you from what a certificate actually is through building a private CA, running enterprise PKI, and diagnosing every category of trust failure. Subscribe so you catch each one, and leave a comment if something here needs a deeper explanation. PKI Course Lab Guide: https://github.com/joshuanmoses/Cyber...