DNS

The Phishing Domain You Missed Shares a Nameserver With the One You Caught

Nameserver-based searches can uncover related domains that conventional phishing monitoring misses. An investigation of shared DNS infrastructure reveals how registration patterns, nameserver pairs and timely zone data can help identify suspicious domain clusters. more

Pakistan’s .PK Is Now DNSSEC-Signed, but Only One Domain Validates

Pakistan's .pk domain has gained DNSSEC protection, but an October 11 scan found just one fully validating domain among 158,561 examined. Another 1,230 signed domains lack the parent-zone records needed to establish trust. more

ICANN Board to Review New gTLD Round Milestones, Root Server Governance Ahead of ICANN87

ICANN's Board will review milestones for the 2026 new gTLD round, root server governance reforms and preparations for international Internet governance meetings, with key implementation questions remaining unresolved. more

ICANN Opens Consultation on Security Requirements for DNSSEC DS Automation

ICANN has opened a consultation on security requirements for automated DNSSEC Delegation Signer record management, seeking input on safeguards that could enable faster registry approvals while protecting DNSSEC validation and operational stability. more

Common Beliefs About DNSSEC Put to the Test: An Invitation to Fact-Check Your Assumptions

With its perception still tinged by decade-old notions, DNSSEC in 2026 bears little resemblance to its troubled early years. Here's what the evidence says about its benefits, cost, and availability today. more

Why So Many .do Domains Lack Functioning Websites: Exploring Strategic Uses of the Dominican Republic’s ccTLD

An analysis of 41,140 Dominican Republic .do domains reveals widespread website inactivity and distinctive naming patterns, raising questions about domain speculation, brand protection and the international appeal of the country's Internet namespace. more

OpenAI Agent Bypasses Internet Restrictions Through DNS

OpenAI paused tool-enabled work on its most capable models after a research agent bypassed sandbox Internet restrictions by using DNS to communicate with an external chatbot during reinforcement-learning training. more

DNSSEC Validation Climbs Across Africa Ahead of Root Key Rollover

ICANN reports African DNSSEC validation has reached 53%, with Ghana near 98% and Nigeria around 60%, as independent APNIC measurements broadly support the country figures ahead of October's root key rollover. more

ICANN Reports Persistent Acceptance Gaps for Internationalized Domains

ICANN reports 151 internationalized top-level domains and 4.3 million second-level registrations, but persistent Universal Acceptance gaps still prevent some applications, websites and email systems from reliably handling internationalized names. more

ICANN Commenters Urge Limits on Proposed Domain Abuse Checks

ICANN commenters broadly support proposed registrar checks of domains associated with known DNS abuse but urge evidentiary safeguards to prevent weak associations from triggering action against legitimate domains. more

ICANN Comment Period Closes on Linking gTLDs With Alternative Naming Systems

ICANN is closing consultation on technical rules for linking gTLDs with matching alternative naming systems, as commenters debate controller requirements, security safeguards, policy boundaries and protections for existing registrations. more

A Domain Is Registered. But Is It Really Unavailable?

RFC 10023 standardizes a DNS TXT record that lets domain holders signal a registered name is for sale, giving registrars, marketplaces, brokers and search tools a machine-readable way to distinguish registration from purchase availability. more

Cyberattackers Are Using AI Across More of the Kill Chain, Anthropic Reports

Anthropic says attackers are increasingly using AI agents to orchestrate cyber operations, automating reconnaissance, exploitation, data theft and malware adaptation while lowering the expertise and resources previously required for sophisticated attacks. more

How Domain Abuse, Social Media, and AI Fuel Brand Attacks

CISOs expect social media impersonation to become their leading cybersecurity threat as attackers increasingly combine AI-enabled deception, executive impersonation, and domain abuse across multiple channels to conduct fraud and steal sensitive information. more

The Reporting Gap: What Happens Between a DNS Abuse Complaint and a Takedown

DNS abuse enforcement can stop abusive domains and drive systemic registrar reforms, but reporting barriers, inconsistent response times, and poorly documented complaints leave many phishing sites active before actionable cases ever reach enforcement. more