> TritonInfoSec News
Home / Oct 08, 2026 / Story
0
#4 BleepingComputer general October 07, 2026 at 20:50 UTC

Hackers hijack Google domains after breaching ccTLD registries

By Bill Toulas

AI Summary

Attackers compromised third-party operators of the .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa) ccTLD registries to modify authoritative DNS records and obtain unauthorized HTTPS certificates for several Google domains. Google confirmed its own systems were not breached, but the attack demonstrates that certificate issuance security is only as strong as the weakest ccTLD registry operator. This supply-chain-style DNS attack puts any domain under those three TLDs at risk of impersonation via valid TLS certificates.

Read full article → https://www.bleepingcomputer.com/news/security/hac…

Relevance score: 82.0/100

# More from October 08

  1. 1
    FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials The Hacker News
  2. 2
    Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details The Hacker News
  3. 3
    SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances The Hacker News
  4. 5
    ShinyHunters Extorted Boeing Spin-off Prior to Arrests Krebs on Security
  5. 6
    Senate passes healthcare cybersecurity bill after 190 million impacted by Change Healthcare breach The Record
  6. 7
    US posts $10 million reward for accused Chinese ‘Hafnium’ hacker The Record
  7. 8
    100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer The Hacker News
  8. 9
    Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer The Hacker News
  9. 10
    Chrome 155 Update Patches 247 Vulnerabilities SecurityWeek