domain name news
Every article and link on tldlog tagged “cybersecurity”, newest first.
Researchers Ian Muscat and Leanne Briffa of Have I Been Squatted found that two uncommon characters, a Cyrillic barred o and a Latin K with hook, can bypass Chromium’s anti-spoofing checks, letting lookalike domains display as trusted brand names.
Source: theregister.com published on
Searchlight Cyber disclosed a flaw in GoBalance, a load balancer used by dark-web sites, that lets attackers recover a site's private key from public data and hijack its .onion address, as seen in the Dread forum takeover.
Source: thehackernews.com published on
The US Justice Department and FBI seized seven domains linked to two alleged Chinese cyber espionage tools, Microscan and FishHub, which they say were used by actors tied to Integrity Technology Group to target critical infrastructure in the US, Asia and Europe.
Source: circleid.com published on
Swiss DNS resolver Quad9 has not blocked any of the 58 domains a Paris court ordered it to restrict for French users, prompting broadcaster beIN Sports to seek penalties of up to €580,000 per day.
Source: torrentfreak.com published on
Senator Thom Tillis and Rep. Zoe Lofgren introduced the DEFEND IP Act, a bicameral bill letting copyright holders obtain court orders to block foreign pirate sites via large ISPs and public DNS resolvers like Cloudflare, while exempting VPN services.
Source: torrentfreak.com published on
A Paris court refused Canal+'s request for up to €50,000 a day in penalties against Cloudflare over piracy blocking of Formula 1 and MotoGP streams, ruling that Cloudflare's CDN-based blocking met its legal obligations even though its 1.1.1.1 DNS resolver remained unblocked.
Source: TorrentFreak published on
CENTR released a Simplification Checklist outlining principles it wants applied to EU legislation affecting ccTLD registries. The document was presented at CENTR’s 2026 General Assembly Policy Session to Thibaut Kleiner, Director at the European Commission’s DG CNECT. It covers cybersecurity, consumer protection, data protection, business data access, electronic identification, registry roles and Better Regulation, urging legal clarity ahead of the EU’s Digital Fitness Check.
Source: CENTR published on
Verisign's blog revisits the 1976 origins of digital signatures and 1978 digital certificates to explain the motivation behind Verisign Informed, its service for checking the current validity of digital certificates in real time.
Source: Verisign published on
Austria's new NISG 2026 cybersecurity law took effect on October 1, extending EU NIS2 requirements to the .at country-code domain. Registry operator nic.at said it implemented the new rules into live operations without disruption. NIS2 is the European Union's revised network and information security directive, which imposes stricter cybersecurity obligations on domain registries and other critical service providers. The smooth transition is notable given concerns across the industry about compliance burdens tied to the directive's rollout in member states.
Source: domainbrief.de original in German published on