TLS certificates

Hackers have managed to obtain counterfeit TLS certificates for Google and other major online services, according to a security report. Fraudulent certificates could allow attackers to impersonate trusted websites and intercept traffic. The incident raises fresh questions about how certificate authorities verify requests and whether users need to take protective steps.

Hackers have obtained counterfeit TLS certificates for Google and other large services after compromising three domain registries, security reporting by Ars Technica says. The registry compromise allowed the attackers to walk away with unauthorized certificates, which could be used to impersonate trusted websites and intercept traffic. The incident raises fresh concerns about the security of the certificate issuance system that underpins web encryption.

Hackers have obtained counterfeit TLS certificates impersonating Google and other large internet services, potentially allowing them to intercept traffic or mount convincing phishing attacks. Security researchers are examining how the fraudulent certificates were issued, and the incident is raising fresh questions about weaknesses in the certificate authority system that underpins trust on the web.

Hackers have obtained unauthorized TLS certificates for Google by hijacking domains, allowing them to potentially impersonate Google websites and intercept encrypted traffic. The incident raises fresh questions about certificate authority validation practices and domain security, as attackers exploited lapsed or misconfigured domain registrations to pass issuance checks. Security experts are warning organizations to lock down domain renewals and monitor certificate transparency logs for fraudulent certificates issued in their name.

Attackers gained access to the country-code top-level domain registries for Ghana (.gh), Sierra Leone (.sl) and American Samoa (.as) and altered their authoritative DNS records. The changes let them pass automated domain control validation and obtain valid TLS certificates for Google domains and other major brands. Google itself was not hacked, and certificate authorities followed their normal procedures, raising concern about weaknesses in the domain validation trust chain.

Hackers have obtained counterfeit TLS certificates for Google and other major online services, raising concerns that attackers could impersonate trusted websites, intercept encrypted traffic, or bypass browser security warnings. The incident highlights weaknesses in the certificate authority system that underpins web encryption, and users are discussing which services were affected and how authorities and browsers will respond.

Attackers have issued counterfeit TLS certificates impersonating Google and other major online services, raising concerns about web security and certificate authority oversight. The report has drawn attention in privacy and security communities, where users are being urged to verify certificates and stay alert to potential phishing risks posed by fraudulent HTTPS credentials.

Attackers compromised three domain registries and used the access to obtain fraudulent TLS certificates for Google and other major services. The unauthorized certificates could let the attackers impersonate trusted websites and intercept traffic. Security researchers are highlighting how registry-level compromise undermines the certificate authority system, and questions are being raised about revocation procedures and how widely the fake certificates were actually used.

Hackers hijacked top-level domains belonging to small countries and used that control to obtain legitimate TLS certificates bearing Google's name, according to a Fortune report. By compromising country-code domain infrastructure, the attackers were able to pass certificate authority validation checks, potentially enabling convincing phishing or man-in-the-middle attacks that browsers would treat as trusted.