Do Son NLnet Labs patched critical Unbound DNS vulnerabilities. Upgrade now to fix Unbound DNS vulnerabilities and block remote code execution attacks.
dns
ICANN has delegated the .web TLD to the DNS root, ending a decade of legal battles. Verisign plans to open registration in the second half of 2026.
NLnet Labs patched critical NSD DNS vulnerabilities, including CVE-2026-12244. Update now to protect your multi-tenant secondary DNS deployments.
Cyble uncovers "Operation Trust Trap," a 16,800-domain network weaponizing *.gov trust to steal credentials. See how APT36 and others hijack the human eye.
AWS unveiled Route 53 Accelerated Recovery, guaranteeing a 60-minute RTO during DNS outages. The new feature is free for public hosted zones to boost cloud resilience.
Microsoft will fully retire the WINS name-resolution service after Windows Server 2025. Support for existing deployments ends in 2034, urging migration to DNS now.
Microsoft's Azure cloud suffered an outage caused by a Front Door configuration change, disrupting Microsoft 365, Xbox, and customer services globally.
AWS confirmed its 15-hour US-EAST-1 outage was caused by a DynamoDB DNS automation race condition that wiped out all service IP addresses.
The Detour Dog campaign is using DNS TXT records for stealthy C2, infecting thousands of websites and quickly shifting infrastructure to evade sinkholing efforts.
A critical flaw (CVE-2025-58063) in the CoreDNS etcd plugin allows attackers to pin DNS cache entries for years, causing a denial of service for service updates.
Cloudflare’s 1.1.1.1 was hit by 12 unauthorized certificates from Fina CA, raising PKI concerns and spotlighting Microsoft’s continued trust.
Three anomalous TLS certificates were improperly issued for Cloudflare’s 1.1.1.1 DNS. The certificates were trusted by Microsoft and went undetected for months.
ISC warns of two high-impact vulnerabilities in BIND preview editions (CVE-2025-40776, CVE-2025-40777), enabling cache poisoning and DoS attacks. Patch immediately!
Cloudflare's 1.1.1.1 public DNS resolver experienced a global outage on July 14, 2025, confirmed as an internal configuration error, not a cyberattack or BGP hijack.
Infoblox unmasks VexTrio, a sprawling malicious adtech ecosystem intertwined with DNS-based malware campaigns and global website compromises, fueled by commercial operators
A DoS flaw in CoreDNS (CVE-2025-47950) allows unauthenticated attackers to crash servers using DNS-over-QUIC. Update to 1.12.2 immediately or disable QUIC.
A high-severity BIND DNS server vulnerability allows remote attackers to crash servers using malformed TSIG signatures. Urgent update advised.
A critical DNSdist vulnerability allows unauthenticated attackers to launch DoS attacks, disrupting DNS operations. Update now to secure your system.
In-depth analysis of Skitnet malware: Rust, Nim, and DNS abuse. Discover how this sophisticated threat evades detection.
A major Zoom outage occurred due to a domain registry error at GoDaddy. Learn about the cause and the risk of self-hosted status pages.
Subdomain takeovers are evolving into a serious supply chain threat, allowing attackers to inject malicious content.
A critical use-after-free vulnerability (CVE-2025-31498) has been discovered and patched in the c-ares DNS library. Update to version 1.34.5 to mitigate potential risks.