TLS certificates

Hackers have managed to obtain counterfeit TLS certificates for Google and other major online services, according to a security report. Fraudulent certificates could allow attackers to impersonate trusted websites and intercept traffic. The incident raises fresh questions about how certificate authorities verify requests and whether users need to take protective steps.

Hackers have obtained counterfeit TLS certificates for Google and other large services after compromising three domain registries, security reporting by Ars Technica says. The registry compromise allowed the attackers to walk away with unauthorized certificates, which could be used to impersonate trusted websites and intercept traffic. The incident raises fresh concerns about the security of the certificate issuance system that underpins web encryption.

Hackers have obtained counterfeit TLS certificates impersonating Google and other large internet services, potentially allowing them to intercept traffic or mount convincing phishing attacks. Security researchers are examining how the fraudulent certificates were issued, and the incident is raising fresh questions about weaknesses in the certificate authority system that underpins trust on the web.

Hackers obtained unauthorized TLS certificates for Google web properties by hijacking control of internet domains, allowing them to potentially impersonate Google sites. The incident highlights weaknesses in certificate authorities' domain validation processes and raises concerns about internet security infrastructure. Security commentators are scrutinizing how the hijacked domains passed verification checks and what safeguards certificate issuers need to strengthen.

Hackers hijacked top-level domains belonging to small countries and used that control to obtain legitimate TLS certificates bearing Google's name, according to a Fortune report. By compromising country-code domain infrastructure, the attackers were able to pass certificate authority validation checks, potentially enabling convincing phishing or man-in-the-middle attacks that browsers would treat as trusted.

Attackers compromised three domain registries and used the access to obtain fraudulent TLS certificates for Google and other major services. The unauthorized certificates could let the attackers impersonate trusted websites and intercept traffic. Security researchers are highlighting how registry-level compromise undermines the certificate authority system, and questions are being raised about revocation procedures and how widely the fake certificates were actually used.