GoKawiilGoogle reports hijacked ccTLDs used to mint fake TLS certificates for its domains
Google disclosed that attackers hijacked DNS infrastructure of three country-code top-level domains — .gh, .sl, and .as — and used that control to obtain unauthorized TLS certificates for several Google domains and other major brands. Google says it has updated Chrome to block the identified fraudulent certificates and worked with other certificate authorities to do the same across browsers.