Hackers obtain counterfeit TLS certificates for Google and other large services
Stephane Bortzmeyer
bortzmeyer at nic.fr
Thu Oct 8 14:29:58 UTC 2026
https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/
DNSDB show that the servers during the hijack were Cloudflare's.
You can see some of the fraudulent certificates at
<https://crt.sh/?id=29669582809>,
<https://crt.sh/?id=29577038388>, <https://crt.sh/?id=29577098913>.
[Don't read the comments of the article if you don't want to risk a
heart attack.]
More information about the dns-operations
mailing list