SSL.com faced a significant security flaw in its domain validation process, allowing unauthorized issuance of TLS certificates for legitimate websites, including Alibaba Cloud's domain. A bug hunter demonstrated the exploit by obtaining certificates for domains not owned by them, prompting SSL.com to revoke 11 mis-issued certificates as a precaution. The company has temporarily disabled the flawed validation method while they work on a fix and will provide a full incident report soon.