Hackers have obtained counterfeit TLS certificates for Google and other large services due to the compromise of three domain registars: DigiNotar, GlobalSign, and StartCom. These registars issue digital certificates, which are used to verify the identity of websites and protect online communications. The compromise has allowed hackers to obtain unauthorized certificates, potentially allowing them to intercept and decrypt sensitive information.

Google froze its open source bug bounty program after a significant increase in AI-generated submissions, which have become a challenge for the company to verify and reward responsibly. The program, which allows researchers to report vulnerabilities in Google's open-source software, has seen a surge in submissions from AI tools, which are often difficult to distinguish from human submissions. This has led to a backlog of unverified reports, making it challenging for Google to review and reward the submissions. As a result, Google has temporarily suspended the program to reassess its policies and procedures.