#9
The Hacker News
general
October 07, 2026 at 18:48 UTC
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
By [email protected] (The Hacker News)
AI Summary
Attackers compromised the DNS registries for three country-code top-level domains — .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa) — to obtain unauthorized HTTPS certificates for several Google domains, as disclosed by Google on October 6, 2026. While Google's own infrastructure was not breached, the attack demonstrates that ccTLD registry compromise can undermine certificate trust for any domain under those TLDs.
Relevance score: 74.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →