Security Concerns Rise Over TLS Certificate Mis-Issuance for 1.1.1.1
TL;DR
This week in security highlights include a major TLS certificate flaw involving Cloudflare's 1.1.1.1 IP, the use of DNS over HTTPS, innovative command and control methods like Google Calendar and Meshtastic, research on persuading AI models to bypass safeguards, and the emergence of malware that actually follows through on webcam hacking threats, along with various technical vulnerabilities in mainframes and Electron/Chrome applications.
Topics:technologysecurity#c2-techniques#css-data-theft#dns-over-https#scam-malware#security#tls-certificates
- This Week In Security: DNS Oops, Novel C2s, And The Scam Becomes Real Hackaday
- Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1 The Cloudflare Blog
- The number of mis-issued 1.1.1.1 certificates grows. Here’s the latest. Ars Technica
- TLS Certificate Mis-Issuance Exposes 1.1.1.1 DNS Service to Exploitation gbhackers.com
- Cloudflare’s 1.1.1.1 DNS Privacy Risked by Unauthorized Certificates CyberInsider
Want the full story? Read the original reporting
Read on Hackaday