✉news TechnologyGadgets first seen 11 h ago, last 24 min ago, peak #12
Hackers obtain unauthorized TLS certificates for Google domains
Original: Hackers Obtain Unauthorized TLS Certificates for Google via Hijacked Domains
Hackers have obtained unauthorized TLS certificates for Google by hijacking domains, allowing them to potentially impersonate Google websites and intercept encrypted traffic. The incident raises fresh questions about certificate authority validation practices and domain security, as attackers exploited lapsed or misconfigured domain registrations to pass issuance checks. Security experts are warning organizations to lock down domain renewals and monitor certificate transparency logs for fraudulent certificates issued in their name.
Why now: Attackers being able to issue trusted certificates for Google undermines a core web security assumption, making the story alarming and widely shared.
Googlecertificate authoritiesTLSdomain hijackers
Rank over time, top of the chart is #1. 9 snapshots from 11 h ago to 24 min ago.
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/1386258