Hackers obtain counterfeit TLS certificates for Google and other large services

TLS certificates are the credentials that prove a website is genuine; authorities issue them after an applicant proves control of a domain. Attackers hijacked three top-level domains, edited DNS records for selected sites and passed those checks, minting fake certificates for Google and other large services. Google had Chrome block the known ones and urges site owners to monitor certificate logs.

Summary written with AI by HowTechMoves, based on reporting by Ars Technica.