Hackers obtain counterfeit TLS certificates for Google and other large services

An Ars Technica security RSS digest covering major cybersecurity developments, including counterfeit TLS certificates obtained through compromised domain registries, active exploitation of a critical Zimbra flaw, AI-agent abuse and protocol risks, supply-chain and account-compromise campaigns, surveillance-camera breaches, social-engineering malware such as ClickFix, exploit kits targeting Chrome and Windows, and large-scale Microsoft patching. The feed includes both confirmed incidents and emerging research or claims; individual article details and CVE identifiers are not provided in the feed