Attackers hijacked top-level domains, minted fake security certs for Google and other orgs

Google reported attackers hijacked ccTLD namespaces (.gh, .sl, .as), altered authoritative DNS records and obtained unauthorized HTTPS certificates for several Google and other organizations' domains. Although Chrome blocked suspected counterfeit certificates and Google found no compromise of its systems, the hijacks could allow interception or modification of user traffic, brand impersonation, and distribution of phishing or malware; Google recommends monitoring Certificate Transparency logs and publishing restrictive CAA records.