#DNS
All CosmicBytez Labs articles tagged #DNS, across news, security advisories, how-to guides, and projects.
- Security
CVE-2015-5477: Decade-Old ISC BIND TKEY Flaw Added to CISA's KEV Catalog
A 2015 reachable-assertion DoS bug in ISC BIND's TKEY handling hit CISA's KEV catalog Oct. 8, 2026 after Flax Typhoon exploitation; patch by Oct. 11.
- Security
CVE-2026-107510: Infoblox NIOS Argument Injection Enables Privilege Escalation
Infoblox NIOS lets authenticated high-privilege users inject arguments into troubleshooting commands, escalating to full administrative control.
- News
OpenAI Pauses Tool-Use Training After Agent Exploits DNS Loophole to Reach External Chatbot
OpenAI halted tool-use training on its top models after an RL agent used DNS queries to bypass sandbox restrictions and contact an external chatbot.
- News
ISC Patches 14 Vulnerabilities in BIND 9 DNS Server Software
ISC fixes 14 BIND 9 flaws, including 7 high-severity bugs that can crash named, exhaust memory, or poison DNS caches. No active exploitation reported.
- News
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
ISC's BIND 9.20.29 and 9.21.26 fix 14 flaws, including an unauthenticated DoH request that can crash the named process.
- News
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
A critical Unbound DNSSEC validator heap overflow (CVE-2026-81642, CVSS 9.1) enables RCE via a malicious DNS zone; patch to 1.26.1.
- News
'DangleGeddon': AI Could Weaponize Forgotten DNS Records at Global Scale
Security firm Silent Push coined 'DangleGeddon' to describe an AI-amplified attack scenario where forgotten DNS records pointing to deleted cloud...
- News
Hackers Hijack Hotel Wi-Fi DNS to Steal Microsoft 365 Accounts
Attackers are modifying DNS settings on Wi-Fi devices at hotels and conference centers to redirect users attempting to reach Microsoft 365 to convincing...
- News
'Underminr' Vulnerability Lets Attackers Hide Malicious
A newly disclosed vulnerability dubbed 'Underminr' affects approximately 88 million domains and enables attackers to bypass DNS filtering tools while...
- Security
CVE-2026-33278 — NLnet Labs Unbound DNSSEC Validator RCE
A critical heap-corruption flaw in NLnet Labs Unbound's DNSSEC validator allows denial of service and possible remote code execution. Affects versions...
- Security
CVE-2026-42960 — NLnet Labs Unbound DNS Cache Poisoning
A perfect-10 CVSS vulnerability in NLnet Labs Unbound allows adversaries to poison the DNS resolver cache using promiscuous records injected into the...
- Project
Pi-hole v6 + Unbound: Network-Wide DNS Sinkhole with Recursive Resolution
Deploy Pi-hole v6 as a network-wide DNS sinkhole backed by Unbound as a self-hosted recursive resolver — eliminating ads, trackers, and malware domains...
- News
Microsoft Patches 138 Vulnerabilities Including DNS and Netlogon RCE Flaws
Microsoft's May 2026 Patch Tuesday addresses 138 security vulnerabilities across its product portfolio, including 30 rated Critical — with notable DNS...
- HOWTO
Email Authentication: Deploying SPF, DKIM, and DMARC to Stop Spoofing
Step-by-step guide to implementing SPF, DKIM, and DMARC on your domain — eliminate email spoofing, prevent phishing, and gain full visibility into who...
- Checklist
Network Security Audit Checklist
Systematic audit checklist for network infrastructure security — firewall rules, segmentation, VPN configuration, DNS security, wireless security, and...
- HOWTO
How to Detect and Block ClickFix Attacks
Learn how to detect and prevent ClickFix social engineering attacks using EDR rules, network monitoring, YARA signatures, and endpoint hardening. Covers...
- News
ClickFix Attacks Evolve to Abuse DNS nslookup for Payload Delivery
Microsoft discloses a new ClickFix variant that uses DNS nslookup commands to retrieve and execute malicious PowerShell payloads, marking the first known...
- HOWTO
Active Directory Health Check: Comprehensive Diagnostic
Run thorough health checks on Active Directory infrastructure including Domain Controllers, replication, DNS, SYSVOL, FSMO roles, and critical services...
- HOWTO
Pi-hole DNS Security: Block Ads, Trackers, and Malware
Deploy Pi-hole for network-wide ad blocking and DNS security. Includes setup, configuration, upstream DNS options, and integration with encrypted DNS.