Attackers Compromise Country Domain Registries to Issue Fraudulent Google Certificates

Three country-code top-level domain (ccTLD) registries were compromised by attackers, enabling them to issue unauthorized HTTPS certificates for Google…

Check if your organization uses domains under .gh, .sl, or .as extensions; review recent certificate issuance logs for these extensions. Monitor alerts from certificate authorities (CAs) regarding mass revocations. Consider implementing enhanced certificate validation and monitoring domain activity across these extensions.