article thumbnail

What Is DNS And Why Should Your Business Care?

Adam Levin

Department of Homeland Security issued an emergency directive in January 2019 giving government agencies ten days to verify that they weren’t compromised by DNS hijacking. Today, less than 20% of DNS traffic is secured by DNSSEC, and only three percent of Fortune 1,000 companies have implemented it.

DNS 141
article thumbnail

Black Hat Flashback: The Day That Dan Kaminsky Saved the Internet

Dark Reading

Dark Reading's Kelly Jackson Higgins explains the enormous legacy left behind by Dan Kaminsky and his seminal "Great DNS Vulnerability" talk at Black Hat 2008.

Internet 112
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Microsoft Patch Tuesday, March 2021 Edition

Krebs on Security

For the second month in a row, Microsoft has patched scary flaws in the DNS servers on Windows Server 2008 through 2019 versions that could be used to remotely install software of the attacker’s choice. “There is the outside chance this could be wormable between DNS servers,” warned Trend Micro’s Dustin Childs.

DNS 337
article thumbnail

Google Public DNS’s approach to fight against cache poisoning attacks

Google Security

Tianhao Chi and Puneet Sood, Google Public DNS The Domain Name System (DNS) is a fundamental protocol used on the Internet to translate human-readable domain names (e.g., When a user enters a domain name in their browser, the DNS resolver (e.g. Google Public DNS). www.example.com) into numeric IP addresses (e.g.,

DNS 72
article thumbnail

Microsoft Patch Tuesday, July 2021 Edition

Krebs on Security

.” Another concerning critical vulnerability in the July batch is CVE-2021-34494 , a dangerous bug in the Windows DNS Server that earned a CVSS score (severity) of 9.8 “Both core and full installations are affected back to Windows Server 2008, including versions 2004 and 20H2,” said Aleks Haugom , also with Automox.

DNS 301
article thumbnail

Episode 233: Unpacking Log4Shell’s Un-coordinated Disclosure Chaos

The Security Ledger

Back in 2008, the late, great security researcher Dan Kaminsky discovered a serious security flaw in a ubiquitous Internet technology: the domain name system, or DNS. Just point your web browser to securityledger.com/subscribe to get notified whenever a new podcast is posted. [ Mark Stanislav is a VP of Information Security at Gemini.

DNS 98
article thumbnail

Microsoft Patch Tuesday, February 2021 Edition

Krebs on Security

A key concern for enterprises is another critical bug in the DNS server on Windows Server 2008 through 2019 versions that could be used to remotely install software of the attacker’s choice. CVE-2021-24078 earned a CVSS Score of 9.8, which is about as dangerous as they come.

DNS 325