National domain registry hijacks enabled interception of Google domains and issuance of fraudulent HTTPS certificates — 06.10.2026
During recent hijacks of the .gh, .sl, and .as ccTLD registries, authoritative DNS records were modified and unauthorized HTTPS certificates were issued for several Google domains and domains belonging to other organizations. Google blocked the affected certificates in Chrome through CRLSets and worked with the issuing certification authorities to revoke them.
CERT24