Hackers obtain counterfeit TLS certificates for Google and other large services

Stephane Bortzmeyer bortzmeyer at nic.fr
Thu Oct 8 14:29:58 UTC 2026


https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/

DNSDB show that the servers during the hijack were Cloudflare's.

You can see some of the fraudulent certificates at
<https://crt.sh/?id=29669582809>,
<https://crt.sh/?id=29577038388>, <https://crt.sh/?id=29577098913>.

[Don't read the comments of the article if you don't want to risk a
heart attack.]



More information about the dns-operations mailing list