Google disclosed on October 6 that attackers breached the registries behind three country-code domains — Ghana's .gh, Sierra Leone's .sl, and American Samoa's .as — and used that access to issue fraudulent HTTPS certificates for Google-owned domains. Google's own infrastructure wasn't touched, but the stolen certificates could let an attacker impersonate legitimate Google sites inside an encrypted connection. The incident highlights how a single compromised ccTLD registry can undermine trust in the global certificate system.
// source: thehackernews.com ↗