Home / Oct 09, 2026 / Story
0
#9 The Hacker News general October 07, 2026 at 18:48 UTC

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

By [email protected] (The Hacker News)

AI Summary

Attackers compromised the DNS registries for three country-code top-level domains — .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa) — to obtain unauthorized HTTPS certificates for several Google domains, as disclosed by Google on October 6, 2026. While Google's own infrastructure was not breached, the attack demonstrates that ccTLD registry compromise can undermine certificate trust for any domain under those TLDs.

Relevance score: 74.0/100

# More from October 09