DNS Security

Sponsored
by

Noteworthy

Domain Research and Monitoring: Keeping an Eye on the Web for You

WHOIS History API: Powering Domain Investigations

Reverse WHOIS: A Powerful Process in Cybersecurity

DNS Security / Most Commented

Attackers Hijack Government and School DNS Records to Promote Illegal Gambling

Infoblox researchers uncovered two operations exploiting government and educational DNS infrastructure across three countries to promote illegal gambling, exposing security weaknesses that conventional website monitoring may overlook. more

The Phishing Domain You Missed Shares a Nameserver With the One You Caught

Nameserver-based searches can uncover related domains that conventional phishing monitoring misses. An investigation of shared DNS infrastructure reveals how registration patterns, nameserver pairs and timely zone data can help identify suspicious domain clusters. more

The Domain Trust Badge: Making Anti-Abuse Work Visible

The Domain Trust Badge pilot introduces a voluntary framework for registries and registrars to demonstrate effective anti-abuse practices through 17 requirements, evidence-based validation and a new metric measuring abuse mitigation performance. more

Pakistan’s .PK Is Now DNSSEC-Signed, but Only One Domain Validates

Pakistan's .pk domain has gained DNSSEC protection, but an October 11 scan found just one fully validating domain among 158,561 examined. Another 1,230 signed domains lack the parent-zone records needed to establish trust. more

ICANN87 in Bali Puts DNS Abuse and New gTLD Implementation in Focus

ICANN87 in Bali brings DNS abuse mitigation, registrant protections and the next gTLD round into focus as policymakers examine implementation challenges affecting domain registries, registrars and Internet users. more

ICANN Opens Consultation on Security Requirements for DNSSEC DS Automation

ICANN has opened a consultation on security requirements for automated DNSSEC Delegation Signer record management, seeking input on safeguards that could enable faster registry approvals while protecting DNSSEC validation and operational stability. more

Common Beliefs About DNSSEC Put to the Test: An Invitation to Fact-Check Your Assumptions

With its perception still tinged by decade-old notions, DNSSEC in 2026 bears little resemblance to its troubled early years. Here's what the evidence says about its benefits, cost, and availability today. more

DNS Hijacks Across Three ccTLDs Linked to 32 Unauthorized HTTPS Certificates

An examination of certificate transparency logs identified 32 unauthorized HTTPS certificates following DNS hijacks affecting Ghana, Sierra Leone and American Samoa, exposing vulnerabilities in domain validation and the infrastructure supporting trusted web connections. more

ICANN Study Links 56% of Malicious Domains to Related Registrations

ICANN researchers identified associated domains for 56.4% of malicious registrations studied, introducing a public-data detection method that could inform DNS abuse investigations and proposed registrar obligations. more

OpenAI Agent Bypasses Internet Restrictions Through DNS

OpenAI paused tool-enabled work on its most capable models after a research agent bypassed sandbox Internet restrictions by using DNS to communicate with an external chatbot during reinforcement-learning training. more

DNSSEC Validation Climbs Across Africa Ahead of Root Key Rollover

ICANN reports African DNSSEC validation has reached 53%, with Ghana near 98% and Nigeria around 60%, as independent APNIC measurements broadly support the country figures ahead of October's root key rollover. more

The Reporting Gap: What Happens Between a DNS Abuse Complaint and a Takedown

DNS abuse enforcement can stop abusive domains and drive systemic registrar reforms, but reporting barriers, inconsistent response times, and poorly documented complaints leave many phishing sites active before actionable cases ever reach enforcement. more

Caribbean-Born Niel Harper Joins ICANN Board, Sets Out Priorities in Q&A

Barbados-born cybersecurity specialist Niel Harper joins ICANN's board in October, aiming to strengthen Latin American and Caribbean participation, improve DNS security and abuse mitigation, and expand developing-economy access to the next gTLD round. more

G7 Cyber Agencies Urge Immediate Post-Quantum Migration Planning

G7 cybersecurity agencies are pressing governments and organizations to inventory cryptographic dependencies and accelerate post-quantum migration as long transition timelines and future quantum attacks threaten Internet security infrastructure. more

15th Registration Operations Workshop, September 29, 2026, 13:00 - 17:00 UTC

The 15th Registration Operations Workshop convenes domain name and DNS professionals September 29 for technical sessions on mTLS, RPKI, DNS resilience, delegations, DNSSEC, registrar concentration, dispute proceedings and alternative naming systems. more