{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "标签“domain-abuse”相关新闻 · tldlog",
  "home_page_url": "https://tldlog.com/zh/t/domain-abuse/",
  "feed_url": "https://tldlog.com/zh/t/domain-abuse/feed.json",
  "description": "tldlog上所有带有“domain-abuse”标签的文章和链接，按时间由新到旧排列。",
  "language": "zh-Hans",
  "items": [
    {
      "id": "https://tldlog.com/zh/l/bricksforge-loudong-bei-liyong/",
      "url": "https://tldlog.com/zh/l/bricksforge-loudong-bei-liyong/",
      "external_url": "https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html?m=1&utm_source=tldlog.com&utm_medium=referral",
      "title": "Bricksforge插件现极高危漏洞被黑客利用",
      "content_html": "<p>Patchstack称攻击者正在利用Bricksforge这一WordPress插件中CVSS评分为10.0的漏洞CVE-2026-85097，未经身份验证即可上传并执行PHP代码。该漏洞影响3.1.8.9及以下版本，修复已在3.1.8.10版本发布。</p><p>来源： <a href=\"https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html?m=1&amp;utm_source=tldlog.com&amp;utm_medium=referral\">thehackernews.com</a></p>",
      "summary": "Patchstack称攻击者正在利用Bricksforge这一WordPress插件中CVSS评分为10.0的漏洞CVE-2026-85097，未经身份验证即可上传并执行PHP代码。该漏洞影响3.1.8.9及以下版本，修复已在3.1.8.10版本发布。",
      "date_published": "2026-10-12T09:44:44Z",
      "date_modified": "2026-10-12T09:44:44Z",
      "tags": [
        ".安全"
      ],
      "language": "zh-Hans"
    },
    {
      "id": "https://tldlog.com/zh/l/icann-guanlian-yuming-yanjiu/",
      "url": "https://tldlog.com/zh/l/icann-guanlian-yuming-yanjiu/",
      "external_url": "https://domainbrief.de/artikel/mehr-als-die-haelfte-der-gemeldeten-missbrauchsdomains-ist-mit-anderen-domains-v?utm_source=tldlog.com&utm_medium=referral",
      "title": "ICANN研究：半数以上恶意域名存在关联域名",
      "content_html": "<p>ICANN首席技术官办公室的一份报告发现，56.4%被报告为恶意的gTLD域名通过公开技术数据与其他域名存在关联，但该方法仅能在域名进入阻止列表前识别出其中4.6%。</p><p>来源： <a href=\"https://domainbrief.de/artikel/mehr-als-die-haelfte-der-gemeldeten-missbrauchsdomains-ist-mit-anderen-domains-v?utm_source=tldlog.com&amp;utm_medium=referral\">domainbrief.de</a></p>",
      "summary": "ICANN首席技术官办公室的一份报告发现，56.4%被报告为恶意的gTLD域名通过公开技术数据与其他域名存在关联，但该方法仅能在域名进入阻止列表前识别出其中4.6%。",
      "date_published": "2026-10-12T07:05:09Z",
      "date_modified": "2026-10-12T07:05:09Z",
      "tags": [
        ".安全"
      ],
      "language": "zh-Hans"
    },
    {
      "id": "https://tldlog.com/zh/l/rare-cyrillic-latin-letters-let-attackers-spoof-urls/",
      "url": "https://tldlog.com/zh/l/rare-cyrillic-latin-letters-let-attackers-spoof-urls/",
      "external_url": "https://www.theregister.com/security/2026/10/10/two-characters-open-up-a-world-of-typosquatting-opportunities-in-chromium-browsers/5302383?utm_source=tldlog.com&utm_medium=referral",
      "title": "罕见西里尔和拉丁字母可在Chromium浏览器中伪造网址",
      "content_html": "<p>Have I Been Squatted公司的研究人员Ian Muscat和Leanne Briffa发现，两个罕见字符——西里尔字母带杠o和带钩拉丁字母K——可绕过Chromium的反仿冒检测，使仿冒域名显示为可信品牌名称。</p><p>来源： <a href=\"https://www.theregister.com/security/2026/10/10/two-characters-open-up-a-world-of-typosquatting-opportunities-in-chromium-browsers/5302383?utm_source=tldlog.com&amp;utm_medium=referral\">theregister.com</a></p>",
      "summary": "Have I Been Squatted公司的研究人员Ian Muscat和Leanne Briffa发现，两个罕见字符——西里尔字母带杠o和带钩拉丁字母K——可绕过Chromium的反仿冒检测，使仿冒域名显示为可信品牌名称。",
      "date_published": "2026-10-11T14:01:28Z",
      "date_modified": "2026-10-11T14:01:28Z",
      "tags": [
        ".安全"
      ],
      "language": "zh-Hans"
    }
  ]
}