Home / News

DNS news

DNSSEC rollovers, resolver outages, encrypted DNS standards and public resolver performance — the changes that actually affect how you configure a network.

Newest first Subscribe by RSS Full archive — every article by month

Enterprise IT NewsThreat IntelligenceNovember 2, 2026

Enterprise IT News Alert: LXD Trusts the Wrong Certificate

LXD and MicroCloud compared every certificate a TLS client sent against their trust store, so a borrowed public certificate was enough to log in as its owner.
Read more →
Cybersecurity NewsThreat IntelligenceNovember 1, 2026

Cybersecurity News Alert: Linux TCP Flaw Rated 9.8 and 5.9

A Linux kernel IPv4 TCP use-after-free was fixed upstream on 5 October, but vendors rated it from 9.8 to 5.9 and Ubuntu and RHEL had shipped no patched kernel.
Read more →
Tech InfrastructureThreat IntelligenceOctober 27, 2026

Tech Infrastructure Alert: Two Flaws Break Wasm Sandboxes

Two CVSS 9.9 Cranelift compiler flaws let a crafted WebAssembly module escape the Wasmtime sandbox, one of them present on aarch64 since 2020.
Read more →
Data Breach UpdateThreat IntelligenceOctober 26, 2026

Data Breach Update Alert: 70,000 Firewall Logins Exposed

Group-IB and NyxLab tie more than 70,000 exposed firewall, VPN and LDAP credentials to k0t, which picked victims from internet scan engines by product rather than by industry.
Read more →
DNS SecurityThreat IntelligenceOctober 25, 2026

DNS Security Alert: One Request Crashes HTTP/3 Servers

QPACK header decompression flaws let a single small HTTP/3 request expand up to 4,000-fold in server memory, and HTTP/3 is the transport underneath DNS over HTTPS.
Read more →
Enterprise IT NewsThreat IntelligenceOctober 24, 2026

Enterprise IT News Alert: Third VeloCloud Zero-Day Exploited

Arista says a CVSS 9.9 SQL injection in VeloCloud Orchestrator is already being exploited, and the product's lowest-privileged tenant role is all an attacker needs to reach superuser operator.
Read more →
Cybersecurity NewsThreat IntelligenceOctober 23, 2026

Cybersecurity News Alert: 333 Tor Exit Relays Hijacked

A researcher scanning Tor's exits found 333 relays funnelling every SSH connection into twelve interception servers, capturing passwords and installing the Ebury credential stealer.
Read more →
Tech InfrastructureThreat IntelligenceOctober 22, 2026

Tech Infrastructure Shaken: Eight eMudhra CA Keys Cracked

Eight eMudhra intermediate CA private keys proved computable from their public certificates, forcing emergency blocks across every major root program and fixes in Go, Node.js and Linux trust stores.
Read more →
Data Breach UpdateThreat IntelligenceOctober 21, 2026

Two Years Hidden in VMware Tools

Solar 4RAYS traced a two-year intrusion at a Russian healthcare group to the Vasilek backdoor hidden in an unused VMware Tools directory, behind four C2 channels of which two are DNS tunnels.
Read more →
DNS SecurityThreat IntelligenceOctober 20, 2026

DNS Security vs ClickFix: Inside the ROMULUS Platform

Forescout documented ROMULUS, a multi-payload ClickFix delivery platform on six hosts serving LegionLoader and a trojanised Stardock installer, with no CVE or exploit anywhere in the chain.
Read more →
Enterprise IT NewsCloudOctober 19, 2026

ConnectWise Breach Hits 173 Tenants

Attackers used a compromised ConnectWise Cloud Backup application credential to sign in to 173 Microsoft 365 tenants, with no password, no exploit and no malware involved.
Read more →
Cybersecurity NewsSpywareOctober 18, 2026

Ads Became a Spyware Delivery Network

The Citizen Lab traced zero-click Candiru spyware on at least 45 Al Jazeera devices to targeted ads bought through legitimate exchanges by Israeli ad firm Discover-Tech.
Read more →
Tech InfrastructureEdge DevicesOctober 17, 2026

Proxyjacking: Edge Devices Hijacked to Resell Bandwidth

GreyNoise found a proxyjacking campaign that conscripted at least 143 D-Link, Ubiquiti and SAP devices across 34 countries into a commercial residential proxy network.
Read more →
Data Breach UpdateGovernmentOctober 16, 2026

Legal Aid Records Reach Back to 1978

The UK Legal Aid Agency says data stolen in the April 2025 intrusion reaches back to 1978, with about 250,000 records predating 2007 and the attacker inside for nearly four months.
Read more →
DNS SecurityVulnerabilitiesOctober 15, 2026

Ivanti VPN Zero-Day Chain Gives Root Access

Ivanti patched CVE-2026-104935 after Volexity found it chained with a still-unpatched flaw to give root on fully patched Connect Secure VPN appliances.
Read more →
Enterprise IT NewsVulnerabilitiesOctober 14, 2026

Microsoft Patches Record 1,407 CVEs

Microsoft closed a record 1,407 CVEs on 13 October 2026 - one exploited Windows Shell zero-day and 55 wormable flaws in DHCP Server, Network Policy Server and Remote Desktop Gateway.
Read more →
Cybersecurity NewsThreat IntelligenceOctober 12, 2026

AI Agent Hit Korea's Top 3 Banks

CrowdStrike ties intrusions at Shinhan, KB Kookmin and Hana Bank to ARTEX, an open-source AI pentest agent run behind nine proxy addresses.
Read more →
Tech InfrastructureDNSSECOctober 11, 2026

The DNS Root Key Rolls Over Today

ICANN switched the root zone to KSK-2024, key tag 38696, today. Validating resolvers without the new trust anchor will return SERVFAIL for every query.
Read more →
Enterprise IT NewsSecurityOctober 10, 2026

GitHub Actions Secret Theft Wave

Two compromised maintainer accounts pushed a fake security-audit workflow to 345 GitHub repositories, harvesting Actions secrets and whole git histories.
Read more →
Data Breach UpdateSecurityOctober 9, 2026

FBI Seizes China Hacking Toolset

The FBI and DOJ seized seven domains behind MicroScan and FishHub, and a ten-agency advisory details a portal that resold access to stolen mailboxes.
Read more →
DNS SecuritySecurityOctober 8, 2026

Hijacked ccTLDs Minted Google TLS Certs

Attackers compromised the .gh, .sl and .as registries and changed authoritative DNS records, minting 12 unauthorized TLS certificates for Google and YouTube names.
Read more →
InfrastructureVulnerabilitiesOctober 7, 2026

Atlassian CVSS 9.3 File Read

Atlassian's CVE-2026-21589 lets unauthenticated attackers read known files from eight Data Center products, including Jira, Confluence and Bitbucket.
Read more →
InfrastructureNetworkingOctober 5, 2026

Subsea Cable Cuts Hit Philippine Internet

Two subsea faults on the Singapore and Hong Kong links stripped ~300Gbps of Philippine international capacity; carriers rerouted and service normalised in 48 hours.
Read more →
VulnerabilitiesSecurityOctober 4, 2026

Dell CSM CVSS 10 Auth Bypass Flaws

Dell patched 13 Container Storage Modules flaws, two at CVSS 10.0: unauthenticated attackers can seize storage admin credentials in Kubernetes clusters.
Read more →
Data BreachSecurityOctober 3, 2026

Pentagon DMDC Exposes 3M Records

A Pentagon DMDC file-sharing flaw left unencrypted records for 3 million military personnel readable for nine months before discovery in July.
Read more →
Enterprise ITSecurityOctober 2, 2026

FortiMail Zero-Day Exploited, No Patch

Fortinet confirmed exploitation of CVE-2026-104286, a CVSS 9.8 unauthenticated file write in FortiMail. No patch has shipped; CISA's deadline is 4 October.
Read more →
Tech InfrastructureSecurityOctober 1, 2026

Cisco SD-WAN Zero-Day Exploited

Cisco confirmed exploitation of CVE-2026-76504, a CVSS 9.8 SD-WAN Manager bypass: one percent-encoded character in the login path grants admin API access.
Read more →
DNS SecurityInfrastructureSeptember 30, 2026

OpenAI Agent Tunnelled Past Sandbox Limits

An OpenAI training agent probed every egress path in its sandbox, found only the DNS resolver answering, and tunnelled questions to an external chatbot.
Read more →
Data Breach UpdateCloudSeptember 29, 2026

Microsoft Titan Auth Flaw, 17T Rows

A 16-year-old researcher forged an unsigned JWT and reached an admin SQL endpoint on Microsoft's internal Titan analytics API. 17.3 trillion rows were in scope.
Read more →
Cybersecurity NewsVulnerabilitiesSeptember 28, 2026

Citrix NetScaler Zero-Days Exploited

Citrix confirmed two NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, exploited in the wild. CVSS 9.5, no workaround, and CISA gave agencies three days.
Read more →
Enterprise IT NewsVulnerabilitiesSeptember 27, 2026

PeopleSoft WAF Bypass Exploited

ShinyHunters resumed mass exploitation of Oracle PeopleSoft CVE-2026-35273 by percent-encoding one character in the request path. Web shells, a signed backdoor, and why DNS logs catch it.
Read more →
Network OutageEnterprise ITSeptember 26, 2026

Kiteworks Orders 6-Hour Server Shutdown

Kiteworks told customers to power off servers for six hours over credible law-enforcement intelligence about an imminent zero-day attack. A planned outage as a control.
Read more →
Tech InfrastructureCloud SecuritySeptember 25, 2026

Cloudflare Cross-Tenant Disk Leak

Cloudflare disclosed a cross-tenant leak in Containers: one dm-thin flag let a workload read 60 KiB of a deleted tenant's disk. Fixed in hours, but the class of bug is spreading.
Read more →
Cybersecurity NewsVulnerabilitiesSeptember 24, 2026

F5 BIG-IP APM Zero-Day Exploited

F5 patched CVE-2026-94127, a CVSS 9.8 BIG-IP APM zero-day already exploited for unauthenticated RCE. CISA gave agencies three days. What it means for DNS and edge fleets.
Read more →
Cybersecurity NewsVulnerabilitiesSeptember 23, 2026

Linux Kernel Flaws Added to CISA KEV, Exploited

CISA added three Linux kernel flaws to the KEV catalog with a three-day deadline. CVE-2025-39682 is network-reachable at CVSS 9.8. What it means for DNS and cloud fleets.
Read more →
DNS SecuritySecuritySeptember 19, 2026

BIND 9 DoH Crash: 14 DNS Security Flaws, Patch Now

ISC BIND 9.20.29 patches 14 DNS security flaws, including CVE-2026-77692, an unauthenticated DoH SIG(0) crash of named. Upgrade recursive servers this week.
Read more →
DNS SecurityVulnerabilitiesSeptember 18, 2026

Unbound CVE-2026-81642: Critical DNS Security Flaw

NLnet Labs Unbound 1.26.1 patches CVE-2026-81642, a critical DNSSEC validator heap overflow with possible RCE via a malicious zone. Upgrade resolvers now.
Read more →
Cybersecurity NewsVulnerabilitiesSeptember 13, 2026

Check Point VPN RCE Flaws: Cybersecurity News, DNS Risk

The Dutch NCSC warns that exploitation of Check Point VPN flaws CVE-2026-85102 and CVE-2026-85103 is imminent. Patch and DNS guidance.
Read more →
Data Breach UpdateSecuritySeptember 12, 2026

GitLab CVE-2026-85706: CVSS 10 Flaw Leaks CI/CD Secrets

A maximum-severity GitLab file-read flaw landed in the week's data breach update cycle. Review exposed DevOps paths.
Read more →
Tech InfrastructureEnterpriseSeptember 11, 2026

Cisco Secure FMC Flaw Exploited to Deploy Qilin Ransomware

An authentication-bypass flaw in Cisco Secure Firewall Management Center is being exploited. Treat management-plane DNS and access paths as suspect.
Read more →
DNS SecurityVulnerabilitiesSeptember 10, 2026

Wormable Windows DNS Server RCE CVE-2026-69730 Patched

A wormable remote code execution class in Windows DNS Server makes the resolver tier-zero infrastructure again.
Read more →
DNS SecurityEnterpriseSeptember 9, 2026

MikroTik RouterOS MikroTrick Flaws Exploited: Patch Now

Exploited RouterOS flaws put edge resolvers and forwarded DNS settings at risk on a large installed base.
Read more →
Enterprise IT NewsVulnerabilitiesSeptember 5, 2026

Chrome V8 Zero-Day CVE-2026-85046 Exploited: Update Now

An exploited V8 flaw in Chrome turns a patched-looking browser fleet into an initial-access path.
Read more →
Cybersecurity NewsEnterpriseSeptember 4, 2026

SonicWall SMA1000 Zero-Days Chained for Unauth RCE

A fresh SMA 1000 remote code execution class keeps internet-facing VPN gateways on the emergency patch list.
Read more →
Cybersecurity NewsRansomwareAugust 4, 2026

SonicWall SMA 1000 Zero-Days Used by INC Ransomware

INC Ransomware is chaining two SonicWall SMA 1000 zero-days to steal credentials, session databases and TOTP MFA seeds.
Read more →

Reporting here is compiled from operator advisories, IETF proceedings, registry and vendor disclosures, and published research — each linked at the foot of the article. Resolver behaviour and rollover schedules change; confirm against the relevant operator before acting on anything here. Measurements referenced in these articles can be reproduced with our free browser-based DNS benchmark. See our terms and disclaimer.

DNS news

All articles