Security Concerns Rise Over TLS Certificate Mis-Issuance for 1.1.1.1

TL;DR Summary
This week in security highlights include a major TLS certificate flaw involving Cloudflare's 1.1.1.1 IP, the use of DNS over HTTPS, innovative command and control methods like Google Calendar and Meshtastic, research on persuading AI models to bypass safeguards, and the emergence of malware that actually follows through on webcam hacking threats, along with various technical vulnerabilities in mainframes and Electron/Chrome applications.
Topics:technology#c2-techniques#css-data-theft#dns-over-https#scam-malware#security#tls-certificates
- This Week In Security: DNS Oops, Novel C2s, And The Scam Becomes Real Hackaday
- Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1 The Cloudflare Blog
- The number of mis-issued 1.1.1.1 certificates grows. Here’s the latest. Ars Technica
- TLS Certificate Mis-Issuance Exposes 1.1.1.1 DNS Service to Exploitation gbhackers.com
- Cloudflare’s 1.1.1.1 DNS Privacy Risked by Unauthorized Certificates CyberInsider
Reading Insights
Total Reads
0
Unique Readers
14
Time Saved
5 min
vs 6 min read
Condensed
94%
1,011 → 62 words
Want the full story? Read the original article
Read on Hackaday