Security Affairs

MAY 1, 2024

The China-linked threat actors Muddling Meerkat are manipulating DNS to probe networks globally since 2019. Infoblox researchers observed China-linked threat actors Muddling Meerkat using sophisticated DNS activities since 2019 to bypass traditional security measures and probe networks worldwide. ” concludes the report.

DNS 130

DNS Firewall DDOS Hacking 130

The Last Watchdog

APRIL 18, 2023

Related: DNS — the good, bad and ugly Without DNS the World Wide Web never would never have advanced as far and wide as it has. However, due to its intrinsic openness and anonymity DNS has also become engrained as the primary communications mechanism used by cyber criminals and cyber warfare combatants.

DNS 208

DNS Internet Internet Cybersecurity 208

Heimadal Security

JULY 19, 2024

Choosing the right DNS software can make a significant difference in your network’s speed, security, and reliability. With a variety of options available, finding the best DNS software for your needs in 2024 can be challenging.

DNS 72

DNS Software 72

Bleeping Computer

JULY 12, 2024

A wave of coordinated DNS hijacking attacks targets decentralized finance (DeFi) cryptocurrency domains using the Squarespace registrar, redirecting visitors to phishing sites hosting wallet drainers. [.]

DNS 111

DNS Cryptocurrency Phishing 111

Security Affairs

JULY 26, 2024

The Internet Systems Consortium (ISC) released BIND security updates that fixed several remotely exploitable DoS bugs in the DNS software suite. An attacker can exploit these vulnerabilities to disrupt DNS services. ISC addressed four high-severity vulnerabilities (CVSS score of 7.5) In BIND 9 versions 9.18.1 through 9.18.27, 9.19.0

DNS 141

DNS Software Internet Internet 141

SecureBlitz

JUNE 19, 2024

This post will show you the best DNS, IP, and WebRTC leak test sites. DNS, IP, and WebRTC leaks happen every day when we browse the internet; because we use local ISPs, we are bound to have these leaks. Also, how to overcome the leaks.

DNS 82

DNS Internet Internet Cybersecurity 82

Tech Republic Security

NOVEMBER 27, 2023

With AdGuard DNS, you can block ads, customize parental controls and keep tabs on DNS requests coming in or out — all for the lowest price on the web.

DNS 141

DNS 141

Penetration Testing

SEPTEMBER 7, 2024

The... The post MindsDB Fixes Critical CVE-2024-24759: DNS Rebinding Attack Bypasses Security Protections appeared first on Cybersecurity News.

DNS 75

DNS Cybersecurity 75

Security Boulevard

MAY 16, 2024

Microsoft is working on a promising-looking protocol to lock down DNS. ZTDNS aims to solve this decades-old problem by integrating the Windows DNS engine with the Windows Filtering Platform—the core component of the Windows Firewall—directly into client devices. Microsoft calls this DNS server or servers the “protective DNS server.”.

DNS 59

DNS Firewall Engineering 59

Bleeping Computer

MAY 13, 2024

Threat actors are using Domain Name System (DNS) tunneling to track when their targets open phishing emails and click on malicious links, and to scan networks for potential vulnerabilities. [.]

DNS 129

DNS Phishing 129

Schneier on Security

FEBRUARY 25, 2020

This is good news : Whenever you visit a website -- even if it's HTTPS enabled -- the DNS query that converts the web address into an IP address that computers can read is usually unencrypted. DNS-over-HTTPS, or DoH, encrypts the request so that it can't be intercepted or hijacked in order to send a user to a malicious site. [.].

DNS 334

DNS Internet Internet Encryption 334

Heimadal Security

AUGUST 2, 2024

More than 35,000 registered domains have been hijacked by threat actors in so-called Sitting Ducks attacks that allow claiming a domain without having access to the owner’s account at the DNS provider or registrar.

DNS 83

DNS Accountability Cybersecurity 83

Security Boulevard

AUGUST 7, 2024

HYAS Protect protective DNS uses advanced data analytics to proactively block cyber threats, a feature unavailable in legacy systems relying on static DNS filtering. AV-TEST , one of the cybersecurity industry’s most trusted evaluators, rates HYAS as the most effective protective DNS solution on the market. What Is HYAS Protect?

DNS 64

DNS Government Cyber threats IoT 64

Heimadal Security

JULY 30, 2024

DNS security risks are everywhere, and the stats show it too. A 2021 IDC survey of over 1,100 organizations across North America, Europe, and the Asia Pacific revealed that 87% had encountered DNS attacks. The average cost per attack was approximately $950,000 globally, rising to about $1 million for organizations in North America.

DNS 95

DNS Risk 95

Security Boulevard

AUGUST 8, 2024

The M&A landscape continues to evolve, driven by factors such as advancements in artificial intelligence, […] The post The Importance of Domain and DNS Lifecycle Management with Mergers and Acquisitions appeared first on Security Boulevard. Morgan 2024 Global M&A Roadmap).

DNS 100

DNS Artificial Intelligence 100

Bleeping Computer

AUGUST 1, 2024

Threat actors have hijacked more than 35,000 registered domains in so-called Sitting Ducks attacks that allow claiming a domain without having access to the owner's account at the DNS provider or registrar. [.]

DNS 99

DNS Accountability 99

Security Boulevard

AUGUST 6, 2024

Threat Intelligence Report Date: August 6, 2024 Prepared by: David Brunsdon, Threat Intelligence - Security Engineer, HYAS Dynamic DNS (DDNS) is a service that automatically updates the Domain Name System (DNS) in real-time to reflect changes in the IP addresses of a domain.

DNS 69

DNS Malware Social Engineering Engineering 69

The Hacker News

JUNE 11, 2024

Cybersecurity researchers have shed more light on a Chinese actor codenamed SecShow that has been observed conducting Domain Name System (DNS) on a global scale since at least June 2023.

DNS 127

DNS Education Government Cybersecurity 127

eSecurity Planet

NOVEMBER 10, 2023

DNS security protects the domain name system (DNS) from attackers seeking to reroute traffic to malicious sites. Since a majority of business IT traffic now accesses or passes through the internet, DNS plays an increasingly important — and vulnerable — role. in the DNS cache for more efficient delivery of information to users.

DNS 105

DNS DDOS Encryption Authentication 105

Penetration Testing

FEBRUARY 19, 2024

A proof-of-concept (PoC) was disclosed for a severe design flaw (CVE-2023-50387) in Domain Name System Security Extensions (DNSSEC), leaving DNS infrastructures vulnerable to widespread denial-of-service (DoS) attacks.

DNS 128

DNS Penetration Testing 128

The Hacker News

JULY 24, 2024

The Internet Systems Consortium (ISC) has released patches to address multiple security vulnerabilities in the Berkeley Internet Name Domain (BIND) 9 Domain Name System (DNS) software suite that could be exploited to trigger a denial-of-service (DoS) condition. "A

DNS 116

DNS Software Cyber threats Internet 116

Bleeping Computer

MAY 3, 2024

A Mullvad VPN user has discovered that Android devices leak DNS queries when switching VPN servers even though the "Always-on VPN" feature was enabled with the "Block connections without VPN" option. [.]

DNS 131

DNS VPN 131

Bleeping Computer

FEBRUARY 11, 2024

ExpressVPN has removed the split tunneling feature from the latest version of its software after finding that a bug exposed the domains users were visiting to configured DNS servers. [.]

DNS 141

DNS Software 141

Penetration Testing

JULY 24, 2024

The Internet Systems Consortium (ISC), the maintainers of the widely-used BIND Domain Name System (DNS) server software, has released critical security updates to address four high-severity vulnerabilities.

DNS 64

DNS Internet Internet Software 64

The Hacker News

MARCH 5, 2024

A new DNS threat actor dubbed Savvy Seahorse is leveraging sophisticated techniques to entice targets into fake investment platforms and steal funds.

DNS 127

DNS Scams Banking Accountability 127

The Hacker News

APRIL 29, 2024

A previously undocumented cyber threat dubbed Muddling Meerkat has been observed undertaking sophisticated domain name system (DNS) activities in a likely effort to evade security measures and conduct reconnaissance of networks across the world since October 2019.

DNS 143

DNS Internet Internet Cyber threats 143

Schneier on Security

APRIL 18, 2019

DNS hijacking isn't new, but this seems to be an attack of uprecidented scale: Researchers at Cisco's Talos security division on Wednesday revealed that a hacker group it's calling Sea Turtle carried out a broad campaign of espionage via DNS hijacking, hitting 40 different organizations.

DNS 258

DNS Internet Internet Risk 258

CSO Magazine

MARCH 29, 2021

Being the backbone of the internet, the Domain Name System (DNS) protocol has undergone a series of improvements and enhancements over the past few years.

DNS 135

DNS Encryption Internet Internet 135

Security Boulevard

JULY 9, 2024

Operational resiliency necessitates intelligence, visibility, and confidence: the three foundational pillars of protective DNS (PDNS). This makes malware command-and-control, phishing attacks, DNS tunneling and a number of other attacks significantly less effective. But Wait, What Is Protective DNS?

DNS 64

DNS Cyber threats Cyber Attacks Phishing 64

Heimadal Security

NOVEMBER 22, 2022

DNS scavenging is the process of removing stale DNS records, usually used together with DNS aging in order to free up space and improve system performance. In cybersecurity, in particular, DNS scavenging can help prevent DNS cache poisoning attacks and even reduce the chances of DNS servers being used in DDoS attacks.

DNS 92

DNS DDOS Cybersecurity 92

Security Boulevard

JUNE 9, 2022

Key Features of this attack: The new malware is a.NET based DNS Backdoor which is a customized version of the open source tool “DIG.net”. The malware leverages a DNS attack technique called "DNS Hijacking" in which an attacker- controlled DNS server manipulates the response of DNS queries and resolve them as per their malicious requirements.

DNS 98

DNS Energy and Utilities Malware Telecommunications 98

Bleeping Computer

APRIL 29, 2024

A new cluster of activity tracked as "Muddling Meerkat" is believed to be linked to a Chinese state-sponsored threat actor's manipulation of DNS to probe networks globally since October 2019, with a spike in activity observed in September 2023. [.]

DNS 97

DNS Firewall 97

Security Boulevard

FEBRUARY 13, 2021

DNS poisoning, also known as DNS cache poisoning or DNS spoofing, is a highly deceptive cyber attack in which hackers redirect web traffic toward fake web servers and phishing websites. The post What is DNS Poisoning? aka DNS Spoofing) | Keyfactor appeared first on Security Boulevard.

DNS 120

DNS Cyber Attacks Phishing 120

Security Boulevard

JULY 17, 2024

The post New Integration: EasyDMARC Integrates with Entri to Simplify DNS Record Management appeared first on EasyDMARC. The post New Integration: EasyDMARC Integrates with Entri to Simplify DNS Record Management appeared first on Security Boulevard. Integration with other tools that help enhance your.

DNS 69

DNS 69

Bleeping Computer

MAY 6, 2021

Attackers can use a newly disclosed domain name server (DNS) vulnerability publicly known as TsuNAME as an amplification vector in large-scale reflection-based distributed denial of service (DDoS) attacks targeting authoritative DNS servers. [.].

DNS 140

DNS DDOS 140

We Live Security

DECEMBER 13, 2023

TELCOs and ISPs, by exploring DNS protection in league with security vendors, can enable rapid deployment of more robust security measures where needed in an age of rapidly expanding online threats.

DNS 86

DNS 86

Dark Reading

JUNE 16, 2023

To properly secure DNS infrastructure, organizations need strong security hygiene around DNS infrastructure and records management as well as closely monitoring and filtering DNS traffic.

DNS 95

DNS Security Awareness 95