TLDR Tech / News
Attackers compromised domain registries, obtained fake Google certificates
Cybercriminals gained control of domain registry operators for Ghana, Sierra Leone, and American Samoa. They used this access to falsify DNS records and acquire unauthorized HTTPS certificates for Google domains, among others. Google identified the fraudulent certificates and implemented blocking measures in Chrome while working with certificate authorities to revoke them. The company stressed that while browser-based blocking is a safeguard, it's not a complete solution for complex DNS compromises and highlighted the need for overall enhancements to HTTPS security.
Read the full story