domain name news
Every article and link on tldlog tagged “dns-security”, newest first.
Researchers Ian Muscat and Leanne Briffa of Have I Been Squatted found that two uncommon characters, a Cyrillic barred o and a Latin K with hook, can bypass Chromium’s anti-spoofing checks, letting lookalike domains display as trusted brand names.
Source: theregister.com published on
ICANN has urged operators of DNSSEC-validating resolvers to confirm that KSK-2024, identified by Key Tag 38696, is present in their trust anchor configuration before the root zone KSK rollover scheduled for 11 October 2026.
Source: icann.org published on
Searchlight Cyber disclosed a flaw in GoBalance, a load balancer used by dark-web sites, that lets attackers recover a site's private key from public data and hijack its .onion address, as seen in the Dread forum takeover.
Source: thehackernews.com published on
The US Justice Department and FBI seized seven domains linked to two alleged Chinese cyber espionage tools, Microscan and FishHub, which they say were used by actors tied to Integrity Technology Group to target critical infrastructure in the US, Asia and Europe.
Source: circleid.com published on
The DNS root zone's signing key changes on October 11, 2026, switching from KSK-2017 to KSK-2024, CZ.NIC's Ondřej Filip explains, urging DNS resolver operators to verify support beforehand to avoid outages. Cloudflare offers a test tool to check resolvers.
Source: blog.nic.cz original in Czech published on
Chrome says attackers hijacked the .gh, .sl, and .as ccTLD registries, altering DNS records and obtaining unauthorized HTTPS certificates for Google and other organizations' domains, prompting Chrome to block the certificates via CRLSets.
Source: Google Security published on