Unicode: It is more than funny domain names., (Wed, Nov 12th)

This report outlines Unicode-driven attack techniques that can undermine application security and code review, including visually confusable characters enabling impersonation, normalization/best-fit mappings that can bypass input filters, invisible variant selectors abused for obfuscation (e.g., the "Glass Worm" incident), and bidirectional text controls used in Trojan Source-style review evasion; it emphasizes avoiding post-validation string transformations and raising awareness of directionality controls.