NewsThe Register — Security
Attackers hijacked top-level domains, minted fake security certs for Google and other orgs
Teaser from the source
Trusted brand impersonation without the usual browser certificate warnings spells trouble
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on top-level
Other advisories
- Not ratedosv:CVE-2026-92681@neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields
- Not ratedosv:CLEANSTART-2026-WT65883bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `dep
- HighCVE-2026-102674Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions
- HighCVE-2026-102674Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions
- Not ratedosv:CVE-2026-102674Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions
- Not ratedosv:CLEANSTART-2026-DL82237Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities
- MediumCVE-2026-18508Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
- Not ratedosv:CVE-2026-54004Kirby: Access to files of top-level drafts is not protected by permissions
Other news entries
ID