{
  "id": 13386454,
  "title": "Two characters open up a world of typosquatting opportunities in Chromium browsers",
  "url": "https://urgent.news/2026/10/10/two-characters-open-up-a-world-of-typosquatting-opportunities-in-13386454",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-10T10:15:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/10/10/two-characters-open-up-a-world-of-typosquatting-opportunities-in-chromium-browsers/5302383"
  },
  "original_language": "en",
  "account": "Two characters can be exploited by cyber-criminals to launch typosquatting attacks against Chromium browsers, researchers have warned. These characters, ө and ƙ, appear visually similar to common letters like 'e', 'o', 'i' and 'k'. Unlike ASCII-compliant characters, these glyphs are not filtered out, providing attackers with new ways to deceive users. The researchers identified 20 lookalike domain names that can bypass Chromium's security measures. Unlike traditional URLs, these domains appear genuine in Unicode, but trigger security warnings that reveal their true identity in Punycode. Despite Chromium's multiple security layers, including checks for common spoofing methods and comparison to popular websites, these domains can still slip through. Users may receive warnings, but only if the imitation domain differs by a single character or an adjacent swap. Email clients are also vulnerable to similar attacks, displaying domains without the same level of scrutiny.",
  "summary": "Attackers abusing rare Cyrillic and Latin letters to impersonate popular websites",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "Two characters open up a world of typosquatting opportunities in Chromium browsers",
        "url": "https://urgent.news/2026/10/10/two-characters-open-up-a-world-of-typosquatting-opportunities-in",
        "published": "2026-10-10T10:15:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}