← All reports

Hackers were able to obtain unauthorized TLS certificates for Google and other large services by compromising domain registries.

CybersecurityTechnologyData SecurityOct 6, 2026score 1.524 posts · 3 replies across 3 instances
A security incident involving hackers obtaining counterfeit TLS certificates for Google and other large services through compromised domain registries has been reported. The attackers exploited DNS records to bypass validation checks and issued unauthorized certificates, prompting Google to revoke them and update Chrome. This highlights vulnerabilities in domain management and certificate issuance processes.

Claims

Hackers were able to obtain unauthorized TLS certificates for Google and other large services by compromising domain registries.
Parent: CybersecurityEntity: TLS certificate issuanceImpact: negativeDate: Oct 6, 2026 - Oct 8, 2026Target: The security of TLS certificate issuance processes

Source posts

@[email protected]
Hackers obtain counterfeit TLS certificates for Google and other large services Compromise of 3 domain registries allows hackers to walk off with unauthorized certs. https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social
117 boosts · 108 favs · 5 replies · Oct 6, 2026
@[email protected]
lol. lmao even. https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/ The attackers launched a series of attacks on the .gh, .sl, and .as country code top-level domains (ccTLDs) and then modified authoritative DNS records for selected domains within those namespaces. By controlling those DNS records, the attackers were able to pass automated domain control validation checks and obtain unauthorized certificates for “several Google domains” and “several leading global brands and widely used online services.” Google said it updated Chrome to block all certificates it identified as unauthorized, and worked with the issuing certification authorities to ensure the unauthorized certificates for Google properties were revoked. H/T @iaintshootinmis
58 boosts · 55 favs · 2 replies · Oct 7, 2026
@[email protected]
#Hackers obtain #counterfeit #TLS certificates for #Google and other large services #security #privacy #encryption https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/
0 boosts · 1 favs · 0 replies · Oct 7, 2026
#encryption#privacy#security#google#tls#counterfeit
@[email protected]
#ArsTechnica #Tech Hackers obtain counterfeit TLS certificates for Google and other large services https://arstechni.ca/tSKD
0 boosts · 0 favs · 0 replies · Oct 7, 2026
#arstechnica#tech
@[email protected]
Hackers obtain counterfeit TLS certificates for Google and other large services https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/ Compromise of 3 domain registries allows hackers to walk off with unauthorized certs. --- 45 uses from 44 accounts #toplink
0 boosts · 0 favs · 0 replies · Oct 7, 2026
#toplink
@[email protected]
Hackers obtain counterfeit TLS certificates for Google and other large services https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/
0 boosts · 0 favs · 0 replies · Oct 7, 2026
@[email protected]
Hackers obtain counterfeit TLS certificates for Google and other large services https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/
0 boosts · 0 favs · 0 replies · Oct 7, 2026
@[email protected]
Hackers obtain counterfeit TLS certificates for #Google and other large services https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/
0 boosts · 0 favs · 0 replies · Oct 7, 2026
#google
@[email protected]
Hackers obtain counterfeit TLS certificates for Google and other large services https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/ https://news.ycombinator.com/item?id=49988230
0 boosts · 0 favs · 0 replies · Oct 7, 2026
@[email protected]
Hackers obtain counterfeit TLS certificates for Google and other large services Compromise of 3 domain registries allows hackers to walk off with unauthorized certs. https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/ #CyberSecurity
1 boosts · 0 favs · 0 replies · Oct 7, 2026
#cybersecurity
@[email protected]
Hackers Impersonate Google and Other Large Services With Counterfeit TLS Certificates https://www.privacyguides.org/news/2026/10/08/hackers-impersonate-google-and-other-large-services-with-counterfeit-tls-certificates/ #Privacy #News #PrivacyGuides
5 boosts · 0 favs · 0 replies · Oct 8, 2026
#privacy#news#privacyguides
@[email protected]
#TechRadar #Tech Google says counterfeit TLS certificates of major services stolen by hackers https://techrad.ar/U6H5
0 boosts · 0 favs · 0 replies · Oct 8, 2026
#techradar#tech
@[email protected]
🔒️ Hackers obtain counterfeit TLS certificates for Google and other large services https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/ #tls #cybersecurity
0 boosts · 0 favs · 0 replies · Oct 8, 2026
#tls#cybersecurity