Attackers are abusing bidirectional text to make fake URLs look real, reviving a decade-old browser flaw now fueling new ...