Hackers compromised the .gh, .sl and .as country-code domain registries and used their access to obtain unauthorized HTTPS certificates for Google and other organizations. Chrome blocked the identified certificates automatically, while Google worked with certificate authorities to revoke those covering its properties. In its October 6 disclosure, Google said it learned of the attacks the previous week. The affected domain endings belong to Ghana, Sierra Leone and American Samoa. The compromise put any domain using these endings at risk, but Google did not say every domain was hijacked. Google stressed that its own systems were not breached. It also said there was no reason to believe the certificate authorities that issued the...
Read the full article at the source.
Comments (0)
No comments yet. Be the first to comment!