Announcement (one of them)
https://infected.io/120/lenovos-supe...rity-nightmare

Private key is public in the wild
Errata Security: Extracting the SuperFish certificate

More interesting facts
https://bug1134506.bugzilla.mozilla....cgi?id=8566794

How to protect your website
GlipDev: Double Meat: Disable Superfish