Hackers Hijack .gh, .sl and .as Registry to Obtain Unauthorized HTTPS Certificates

Cybersecuritynews •Guru Baran • October 7, 2026

Hackers compromised the .gh, .sl and .as country-code domain registries and used their access to obtain unauthorized HTTPS certificates for Google and other organizations. Chrome blocked the identified certificates automatically, while Google worked with certificate authorities to revoke those covering its properties. In its October 6 disclosure, Google said it learned of the attacks the […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Google Blocks Unauthorized HTTPS Certificates from ccTLD Hijacks Attackers hijacked the .gh, .sl, and .as country-code top-level domains, allowing them to obtain unauthorized HTTPS certificates for Google and other organizations. Google confirmed that its systems were not compromised, and the attacks involved modifying authoritative DNS records. The company blocked the unauthorized certificates in Chrome and worked with certificate authorities to revoke them. Although Google has blocked known unauthorized certificates, it warned that not all affected domains may have been identified. The incidents were disclosed on October 6, 2026, and Google urged domain owners to monitor Certificate Transparency logs for unauthorized certificate issuance. The scope of affected organizations remains unclear, but it includes several large global brands. 15 sources 58

Extracted Entities

Hackers Hijack .gh, .sl and .as Registry to Obtain Unauthorized HTTPS Certificates

The full story

Extracted Entities

Attack Types (2)

Companies (1)

Tools (1)