Attackers Hijack Google Domains by Compromising Country-Code Registry Operators

Cybercriminals gained unauthorized access to HTTPS certificates for multiple Google domains and hijacked domains within country-code top-level domain…

Immediately review your DNSSEC configuration and authentication at your domain registrar; enable change notifications for nameserver updates; audit certificate transparency logs for unauthorized certificates issued for your domains; coordinate with your registrar on additional access controls and multi-factor authentication for administrative accounts.