CYRILLIC HOMOGLYPHS STILL BYPASS CHROMIUM'S TYPO-SQUATTING FILTERS

Summary from the TLDR InfoSec newsletter

An all-Cyrillic lookalike of apple.com (аррӏө[.]com) slipped past Chromium's homoglyph checks because its "ө" falls outside the browser's 29-character blocklist, so Chrome, Edge, and Brave rendered it as a legitimate domain instead of flagging it or showing Punycode.