🚨 **Cybersecurity Alert: Country-Code Domain Hijacking**

🚨 **Cybersecurity Alert: Country-Code Domain Hijacking**

In late September 2026, reported hijacks affecting the `.gh` (Ghana), `.sl` (Sierra Leone), and `.as` (American Samoa) domains highlighted a critical weakness in the Internet’s trust infrastructure.

By compromising domain registry administration and manipulating DNS records, attackers were reportedly able to obtain unauthorized, trusted TLS certificates for major brands, including Google and YouTube—without breaching those companies’ internal systems.

🔐 **Key Lessons for Domain Owners:**

* **Monitor Certificate Transparency (CT) logs** to detect unauthorized certificate issuance.
* **Enforce CAA records** to restrict which Certificate Authorities can issue certificates for your domains.
* **Strengthen ACME account controls** and use supported account-binding mechanisms where available.
* **Maintain a complete inventory** of regional, parked, and brand-related domains.

**The key takeaway:** Domain and registry security are essential to protecting the wider Internet’s trust infrastructure. Strong DNS governance and continuous certificate monitoring are critical.

#Cybersecurity #DNS #DomainSecurity #TLS #CertificateTransparency #InternetGovernance