9 Quintillion Tries Later: Researchers Crack SHA-1

Researchers at Google and CWI Amsterdam demonstrated the first practical SHA-1 collision by generating two different PDFs with the same SHA-1 hash, proving the algorithm is no longer secure; the report details the massive compute effort required, the implications for systems still using SHA-1 (notably Git and legacy certificates), and notes that SHA-1 has long been deprecated and phased out by standards and browsers.