As cited
Copy frozen at (site build).
vulnerabilities
Hackers obtain counterfeit TLS certificates for Google and other large services
Attackers compromised three country code top-level domains (.gh, .sl, .as) and manipulated DNS records to pass domain validation checks, obtaining counterfeit TLS certificates for Google and other major services. Google identified the unauthorized certificates, updated Chrome to block them, and coordinated with certificate authorities to revoke them. The incident highlights the security risk posed by certificate issuance validation processes.
Why it matters: Security teams and infrastructure operators should monitor their certificate transparency logs for unauthorized certificates issued in their domains and verify the integrity of their DNS configurations, as attackers with domain control can bypass certificate validation and impersonate legitimate services.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Hackers obtain counterfeit TLS certificates for Google and other large services
Attackers compromised three country code top-level domains (.gh, .sl, .as) and manipulated DNS records to pass domain validation checks, obtaining counterfeit TLS certificates for Google and other major services. Google identified the unauthorized certificates, updated Chrome to block them, and coordinated with certificate authorities to revoke them. The incident highlights the security risk posed by certificate issuance validation processes.
Why it matters: Security teams and infrastructure operators should monitor their certificate transparency logs for unauthorized certificates issued in their domains and verify the integrity of their DNS configurations, as attackers with domain control can bypass certificate validation and impersonate legitimate services.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Hackers obtain counterfeit TLS certificates for Google and other large services
Attackers compromised three country code top-level domains (.gh, .sl, .as) and manipulated DNS records to pass domain validation checks, obtaining counterfeit TLS certificates for Google and other major services. Google identified the unauthorized certificates, updated Chrome to block them, and coordinated with certificate authorities to revoke them. The incident highlights the security risk posed by certificate issuance validation processes.
Why it matters: Security teams and infrastructure operators should monitor their certificate transparency logs for unauthorized certificates issued in their domains and verify the integrity of their DNS configurations, as attackers with domain control can bypass certificate validation and impersonate legitimate services.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Hackers obtain counterfeit TLS certificates for Google and other large services
Attackers compromised three country code top-level domains (.gh, .sl, .as) and manipulated DNS records to pass domain validation checks, obtaining counterfeit TLS certificates for Google and other major services. Google identified the unauthorized certificates, updated Chrome to block them, and coordinated with certificate authorities to revoke them. The incident highlights the security risk posed by certificate issuance validation processes.
Why it matters: Security teams and infrastructure operators should monitor their certificate transparency logs for unauthorized certificates issued in their domains and verify the integrity of their DNS configurations, as attackers with domain control can bypass certificate validation and impersonate legitimate services.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Hackers obtain counterfeit TLS certificates for Google and other large services
Attackers compromised three country code top-level domains (.gh, .sl, .as) and manipulated DNS records to pass domain validation checks, obtaining counterfeit TLS certificates for Google and other major services. Google identified the unauthorized certificates, updated Chrome to block them, and coordinated with certificate authorities to revoke them. The incident highlights the security risk posed by certificate issuance validation processes.
Why it matters: Security teams and infrastructure operators should monitor their certificate transparency logs for unauthorized certificates issued in their domains and verify the integrity of their DNS configurations, as attackers with domain control can bypass certificate validation and impersonate legitimate services.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Hackers obtain counterfeit TLS certificates for Google and other large services
Attackers compromised three country code top-level domains (.gh, .sl, .as) and manipulated DNS records to pass domain validation checks, obtaining counterfeit TLS certificates for Google and other major services. Google identified the unauthorized certificates, updated Chrome to block them, and coordinated with certificate authorities to revoke them. The incident highlights the security risk posed by certificate issuance validation processes.
Why it matters: Security teams and infrastructure operators should monitor their certificate transparency logs for unauthorized certificates issued in their domains and verify the integrity of their DNS configurations, as attackers with domain control can bypass certificate validation and impersonate legitimate services.
- Source published
- First seen by Cybersecurity Tracker