.security · tldlog

Rare Cyrillic and Latin letters let attackers spoof URLs in Chromium browsers

Sun, 11 Oct 2026 14:01:28 GMT

Researchers Ian Muscat and Leanne Briffa of Have I Been Squatted found that two uncommon characters, a Cyrillic barred o and a Latin K with hook, can bypass Chromium’s anti-spoofing checks, letting lookalike domains display as trusted brand names.

Source: theregister.com

ICANN reminds resolver operators to check new DNSSEC root key ahead of rollover

Sun, 11 Oct 2026 07:26:48 GMT

ICANN has urged operators of DNSSEC-validating resolvers to confirm that KSK-2024, identified by Key Tag 38696, is present in their trust anchor configuration before the root zone KSK rollover scheduled for 11 October 2026.

Source: icann.org

GoBalance bug lets attackers hijack Tor .onion addresses, researchers say

Sat, 10 Oct 2026 22:55:43 GMT

Searchlight Cyber disclosed a flaw in GoBalance, a load balancer used by dark-web sites, that lets attackers recover a site's private key from public data and hijack its .onion address, as seen in the Dread forum takeover.

Source: thehackernews.com

DOJ and FBI seize domains tied to alleged Chinese cyber espionage tools

Sat, 10 Oct 2026 13:28:32 GMT

The US Justice Department and FBI seized seven domains linked to two alleged Chinese cyber espionage tools, Microscan and FishHub, which they say were used by actors tied to Integrity Technology Group to target critical infrastructure in the US, Asia and Europe.

Source: circleid.com