The False Positive Crisis: Microsoft Defender vs. DigiCert
A significant operational disruption occurred this weekend as Microsoft Defender began flagging legitimate DigiCert root certificates as 'Trojan:Win32/Cerdigent.A!dha'. This incident highlights the fragility of the global trust infrastructure. When automated security tools incorrectly identify the very certificates that validate software integrity, the result is a 'denial of trust' that can paralyze enterprise operations. Reports indicate that in some instances, Defender automatically removed these certificates, breaking VPNs, secure web gateways, and internal application authentication. This event underscores the need for 'human-in-the-loop' verification for critical infrastructure components and suggests that the move toward fully autonomous security response must be tempered with robust fail-safes for core identity providers.
Primary Sourcing Telemetry: Synthesized from BleepingComputer under Transformative Fair Use for defensive security awareness.
Explore the Complete Broadsheet Edition
This briefing is part of the 4-page daily intelligence broadsheet published on 2026-05-04.