✉news TechnologyGadgets first seen 1 d ago, last 6 h ago, peak #12

Hackers Get Unauthorized TLS Certificates for Google Domains

Original: Hackers Obtain Unauthorized TLS Certificates for Google via Hijacked Domains

Attackers obtained TLS certificates for Google web properties without authorization, using hijacked domains to pass certificate authority validation. The certificates could have enabled interception of traffic to the affected Google sites. The incident raises fresh questions about domain-based validation in the web's certificate system and how quickly the rogue certificates were detected and revoked.

Why now: Security flaws that could allow interception of traffic to major Google services are a serious concern for internet users.

Googlecertificate authorities

Open on news →

Evidence

• Hackers Obtain Unauthorized TLS Certificates for Google via Hijacked Domains · Gadget Review

API: https://socialmediatrends-api.osmike.com/v1/trends/1386258