Counterfeit TLS Certificate Attacks via Top-Level Domain Hijacking
Attackers hijacked three top-level domains to mint counterfeit TLS certificates for large organizations like Google. This threat allows for potential man-in-the-middle attacks and eavesdropping on encrypted communications. Organizations should immediately assess their TLS certificate usage and monitor for suspicious certificate issuance. Implementing robust monitoring and validation of TLS certificates is crucial.