article thumbnail

Microsoft Patch Tuesday, March 2021 Edition

Krebs on Security

For the second month in a row, Microsoft has patched scary flaws in the DNS servers on Windows Server 2008 through 2019 versions that could be used to remotely install software of the attacker’s choice. “There is the outside chance this could be wormable between DNS servers,” warned Trend Micro’s Dustin Childs.

DNS 347
article thumbnail

What Is DNS And Why Should Your Business Care?

Adam Levin

Department of Homeland Security issued an emergency directive in January 2019 giving government agencies ten days to verify that they weren’t compromised by DNS hijacking. Today, less than 20% of DNS traffic is secured by DNSSEC, and only three percent of Fortune 1,000 companies have implemented it.

DNS 141
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Microsoft Patch Tuesday, July 2021 Edition

Krebs on Security

.” Another concerning critical vulnerability in the July batch is CVE-2021-34494 , a dangerous bug in the Windows DNS Server that earned a CVSS score (severity) of 9.8 “Both core and full installations are affected back to Windows Server 2008, including versions 2004 and 20H2,” said Aleks Haugom , also with Automox.

DNS 314
article thumbnail

Microsoft Patch Tuesday, February 2021 Edition

Krebs on Security

A key concern for enterprises is another critical bug in the DNS server on Windows Server 2008 through 2019 versions that could be used to remotely install software of the attacker’s choice. CVE-2021-24078 earned a CVSS Score of 9.8, which is about as dangerous as they come.

DNS 339
article thumbnail

Patch Tuesday, Good Riddance 2020 Edition

Krebs on Security

Additionally, Microsoft released an advisory on how to minimize the risk from a DNS spoofing weakness in Windows Server 2008 through 2019. The critical bits reside in updates for Microsoft Exchange Server , Sharepoint Server , and Windows 10 and Server 2016 systems.

DNS 312
article thumbnail

Black Hat Flashback: The Day That Dan Kaminsky Saved the Internet

Dark Reading

Dark Reading's Kelly Jackson Higgins explains the enormous legacy left behind by Dan Kaminsky and his seminal "Great DNS Vulnerability" talk at Black Hat 2008.

Internet 112
article thumbnail

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Krebs on Security

Launched in 2008, privnote.com employs technology that encrypts each message so that even Privnote itself cannot read its contents. A review of the passive DNS records tied to this address shows that apart from subdomains dedicated to tornote[.]io, The real Privnote, at privnote.com. And it doesn’t send or receive messages.

Phishing 255