SpaceX DeskStarship Flight 15 pushed to November on FAA planning slide Hacking DeskHijackers got rogue Google certificates via .gh, .sl and .as Loud FaithRelient K — Mmhmm AustraliaCanberra marks 25 years since Australia went to Afghanistan AustraliaTeen charged after stolen car hits woman at Flinders Street Loud FaithEmery — The Question AustraliaRoy Morgan puts One Nation on track for 11 seats in Victoria Game ReviewsSquadron 42 opens Steam wishlists ahead of Q2 2027 release Loud FaithDemon Hunter — Summer of Darkness Tech DeskKorean banks got an AI hacking warning weeks before breaches AustraliaHobart council election enters its final fortnight Loud FaithNorma Jean — Bless the Martyr and Kiss the Child Tesla DeskTesla update lets Wall Connector charge from Powerwall solar The WireAmmonia-powered bulk ship Mineral Europa heads for Australia The WireHouthi strike on Riyadh airport kills 13, Saudis vow response AustraliaFirmus pulls its ASX float as Tasmanian data centres stall AustraliaEliud Kipchoge wins Melbourne Marathon in race record AustraliaSA care leavers want state support until they turn 21 Tesla DeskTesla Semi Megachargers open between Savannah and Atlanta AI DeskMusk says Grok Bot can shop for you from a photo of your card

SpaceX DeskStarship Flight 15 pushed to November on FAA planning slide Hacking DeskHijackers got rogue Google certificates via .gh, .sl and .as Loud FaithRelient K — Mmhmm AustraliaCanberra marks 25 years since Australia went to Afghanistan AustraliaTeen charged after stolen car hits woman at Flinders Street Loud FaithEmery — The Question AustraliaRoy Morgan puts One Nation on track for 11 seats in Victoria Game ReviewsSquadron 42 opens Steam wishlists ahead of Q2 2027 release Loud FaithDemon Hunter — Summer of Darkness Tech DeskKorean banks got an AI hacking warning weeks before breaches AustraliaHobart council election enters its final fortnight Loud FaithNorma Jean — Bless the Martyr and Kiss the Child Tesla DeskTesla update lets Wall Connector charge from Powerwall solar The WireAmmonia-powered bulk ship Mineral Europa heads for Australia The WireHouthi strike on Riyadh airport kills 13, Saudis vow response AustraliaFirmus pulls its ASX float as Tasmanian data centres stall AustraliaEliud Kipchoge wins Melbourne Marathon in race record AustraliaSA care leavers want state support until they turn 21 Tesla DeskTesla Semi Megachargers open between Savannah and Atlanta AI DeskMusk says Grok Bot can shop for you from a photo of your card

Monday 12 October 2026

Hijackers got rogue Google certificates via .gh, .sl and .as

Attackers hijacked the .gh, .sl and .as domain registries and got real security certificates for Google and YouTube names. Chrome has blocked them.

Glyph Monday 12 October 2026, open calendar6 min read

Photo: BalticServers.com / Wikimedia Commons (CC BY-SA 3.0), cropped

Listen

Free browser voice. Starts at once.

Uses text-to-speech.

Attackers broke into the systems behind three country-code domains, .gh for Ghana, .sl for Sierra Leone and .as for American Samoa. They used that control to get real HTTPS certificates for Google and YouTube addresses. Google says its own systems weren't breached. The attackers didn't need them to be.

Rows of server racks lit by blue LED strips inside a data centre — Photo: BalticServers.com / Wikimedia Commons (CC BY-SA 3.0), cropped

Say hello in our guest book

Published

Glyph Monday 12 October 2026 at 11:00 am Adelaide, open calendar6 min read

This desk has not corrected this file. Corrections.

Related · More in Hacking

Qilin ransomware suspect extradited from Japan to Germany

DOJ and FBI seize Flax Typhoon tools Microscan and FishHub

FBI confirms multiple arrests in its ShinyHunters hack probe

CISA adds Apple CoreGraphics flaw CVE-2026-86950 to KEV list

The paper

Comments

No notes on this story yet.

Sign in to comment