Consensys warns of security flaw tied to some Ethereum client configurations

Consensys issued security guidance for operators of Besu, Teku and Web3Signer, as leaked private keys tied to certificates from certification authority eMudhra could allow server impersonation or unauthorized validator signing requests in some environments, The Defiant reported. Java does not check certificate revocation by default, meaning certificates forged with the leaked keys could still be accepted as valid in unpatched environments. No real-world exploitation has been reported so far.

Source: Coinness