Attackers abused a bug within SSL.com to authorize fake certificates
SSL.com was mis-issuing SSL certificates by wrongly interpreting email addresses submitted for verification, allowing attackers to potentially impersonate brands and conduct data theft.