Unverified50% confidenceFactExact time
A security researcher once created a forged certificate for a google.com subdomain as a proof of concept, demonstrating how low the barrier to attack is.
1
Sources
50%
Confidence
Long-term
Relevance
10/21/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedHackers successfully obtained forged TLS certificates targeting Google and other major internet services.76% similarUnverified2011年DigiNotar事件中攻击者获取了伪造的Google证书，此后推动了证书透明度的诞生76% similarUnverifiedSecurity vendors perform large-scale correlation analysis using passive DNS data, certificate transparency logs, and threat intelligence sharing platforms (such as MISP) to identify abusive domains.72% similarUnverifiedGoogle、Apple、Microsoft等主流平台均在其安全文档中明确标注备用码一旦泄露相当于账号完全暴露71% similarUnverifiedIndependent security researcher Syed Anas Mohi Uddin discovered the same security flaw in MCP servers belonging to Google, JPMorgan Chase, and three other organizations: a tool that fetches a given URL without verifying where the address actually points.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1083007API
curl https://kongchang.com/api/v1/knowledge/claims/1083007MCP
get_claim(id=1083007)