Hackers obtain counterfeit TLS certificates for Google and other large services

A security-news RSS digest covering active exploitation, certificate and domain-registry compromise, ransomware and data breaches, AI-agent abuse, cloud and endpoint attacks, exploit kits, social-engineering campaigns, and emerging cryptographic and protocol risks. The most immediately severe items include unauthorized TLS certificates, active exploitation of a critical Zimbra flaw for email theft, large-scale account compromise, AI-agent takeover vulnerabilities, and attacks against government and surveillance infrastructure. No specific CVE identifiers are provided in the feed metadata.