TLDR InfoSec · MISCELLANEOUS

16 THOUGHTS ON “LOCAL NETWORKS GO GLOBAL WHEN DOMAIN NAMES COLLIDE”

krebsonsecurity.com7 min read

Summary from the TLDR InfoSec newsletter

Due to the proliferation of new Top Level Domains (TLDs), many internal networks now collide with external networks, potentially exposing their networks to credential theft and other attacks. Security researcher Philippe Caturegli has been mapping this "namespace collision" vulnerability by scanning for self-signed certificates referencing domains in business-oriented TLDs. Caturegli found over 9,000 exposed domains, with some government entities and critical infrastructure affected.