< BACK TO NEWS
negativeSYS.SOURCE: The Hacker News• 2026-10-08T00:18:17+05:30

Unauthorized Certificate Issuance via Hijacked .gh, .sl, and .as Domains Targeting Google Services

Attackers hijacked .gh, .sl, and .as domain registries to obtain unauthorized HTTPS certificates for Google domains, enabling potential man-in-the-middle attacks. Google blocked the certificates via CRLSets, collaborated with CAs to revoke them, and advised domain owners to monitor Certificate Transparency logs and enforce strict CAA records.

Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6.

Google's own systems were not breached, but any domain ending in .gh (Ghana), .sl (Sierra Leone) or .as (American Samoa) was put at risk. With such a certificate, an attacker could pose as the real site over an encrypted

Read original article

*** END OF TRANSMISSION ***

> MARGARET HAMILTON, APOLLO PROGRAM SOFTWARE LEAD, DIES AT 90> NOUS RESEARCH ACHIEVES $1.5B VALUATION WITH ENTERPRISE AI AGENTS LAUNCH> MICROSOFT UNVEILS AI-POWERED PCS WITH NVIDIA RTX SPARK CHIPS AND ENHANCED WINDOWS 11> ROSALIND FRANKLIN'S ROLE IN DNA STRUCTURE DISCOVERY REEXAMINED> MAJOR MATHEMATICAL BREAKTHROUGHS ANNOUNCED BY OPENAI> ICANN PUBLISHES 2026 NEW GENERIC TOP-LEVEL DOMAIN APPLICATIONS AND PROGRAM DETAILS> META AND MICROSOFT RESTRICT EMPLOYEE ACCESS TO CLAUDE AI, PRIORITIZE INTERNAL TOOLS> UNAUTHORIZED CERTIFICATE ISSUANCE VIA HIJACKED .GH, .SL, AND .AS DOMAINS TARGETING GOOGLE SERVICES> PROGRAMMING HEURISTIC: PUSHING CONDITIONALS UP AND LOOPS DOWN WITH ALGEBRAIC PERSPECTIVES> META'S MUSE AI ASSISTANT EXPANDS TO IPAD ONE MONTH AFTER MOBILE LAUNCH> MARGARET HAMILTON, APOLLO PROGRAM SOFTWARE LEAD, DIES AT 90> NOUS RESEARCH ACHIEVES $1.5B VALUATION WITH ENTERPRISE AI AGENTS LAUNCH> MICROSOFT UNVEILS AI-POWERED PCS WITH NVIDIA RTX SPARK CHIPS AND ENHANCED WINDOWS 11> ROSALIND FRANKLIN'S ROLE IN DNA STRUCTURE DISCOVERY REEXAMINED> MAJOR MATHEMATICAL BREAKTHROUGHS ANNOUNCED BY OPENAI> ICANN PUBLISHES 2026 NEW GENERIC TOP-LEVEL DOMAIN APPLICATIONS AND PROGRAM DETAILS> META AND MICROSOFT RESTRICT EMPLOYEE ACCESS TO CLAUDE AI, PRIORITIZE INTERNAL TOOLS> UNAUTHORIZED CERTIFICATE ISSUANCE VIA HIJACKED .GH, .SL, AND .AS DOMAINS TARGETING GOOGLE SERVICES> PROGRAMMING HEURISTIC: PUSHING CONDITIONALS UP AND LOOPS DOWN WITH ALGEBRAIC PERSPECTIVES> META'S MUSE AI ASSISTANT EXPANDS TO IPAD ONE MONTH AFTER MOBILE LAUNCH