Return to Threats

Google Domains Impacted by Recent ccTLD Hijacks

securityweek.com 2026-10-09 AI supply chain High

What Happened

Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains. The post Google Domains Impacted by Recent ccTLD Hijacks appeared first on SecurityWeek .

Why It Matters

SecurityWeek reports that attackers hijacked the .gh, .sl, and .as country-code top-level-domain registries, modified authoritative DNS records, and obtained unauthorized HTTPS certificates for several Google domains and other organizations. Google stated that its systems were not compromised and blocked the certificates in Chrome while coordinating their revocation. This is not an AI-specific incident; RealGround analysis maps it to AI supply-chain risk because compromised third-party infrastructure and trust dependencies can affect AI services, integrations, and domain-based controls, warranting dependency and certificate governance reviews.

Healthcare Fintech SaaS SMB AI startups

RealGround Analysis

This signal maps to AI supply chain. Organizations using AI agents, LLM APIs, SaaS integrations, or sensitive data workflows should review whether this class of issue could create unauthorized tool execution, data leakage, weak approval gates, or unmanaged supply-chain exposure.

Recommended Actions

  • Restrict AI agent tool permissions and production write paths.
  • Review sensitive data access across prompts, logs, embeddings, memory, and SaaS integrations.
  • Add human approval workflows for high-impact or state-changing actions.
  • Run prompt injection and indirect prompt injection tests against affected workflows.
  • Document the owner, control gap, and remediation deadline for this risk class.

Source

https://www.securityweek.com/google-domains-impacted-by-recent-cctld-domain-hijacks/

Talk to AI CISO