New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites

The attack exploits misconfigurations in TLS servers to redirect HTTPS traffic from a victim's browser to a different TLS service endpoint located on another IP address to steal sensitive information.