
WatchTowr Labs discovered a vulnerability in WHOIS clients, allowing them to control a WHOIS server and exploit TLS/SSL certificate authorities, potentially undermining secure communication on the web. The researchers found that many organizations, including government agencies and cyber security companies, were querying their rogue WHOIS server, making it possible to issue rogue TLS/SSL certificates.