News

Nearly six out of ten surveyed ClubCISO members are confident AI is used securely in their organizations

UK organizations are less likely than their European peers to have known exploited bugs but take longer to fix them

The FBI claims to have seized the domain and servers of hacking forum BreachForums

Microsoft is working on a promising-looking protocol to lock down DNS.

ZTDNS aims to solve this decades-old problem by integrating the Windows DNS engine with the Windows Filtering Platform—the core component of the Windows Firewall—directly into client devices.

Jake Williams, VP of research and development at consultancy Hunter Strategy, said the union of these previously disparate engines would allow updates to be made to the Windows firewall on a per-domain name basis. The result, he said, is a mechanism that allows organizations to, in essence, tell clients “only use our DNS server, that uses TLS, and will only resolve certain domains.” Microsoft calls this DNS server or servers the “protective DNS server.”

By default, the firewall will deny resolutions to all domains except those enumerated in allow lists. A separate allow list will contain IP address subnets that clients need to run authorized software. Key to making this work at scale inside an organization with rapidly changing needs. Networking security expert Royce Williams (no relation to Jake Williams) called this a “sort of a bidirectional API for the firewall layer, so you can both trigger firewall actions (by input *to* the firewall), and trigger external actions based on firewall state (output *from* the firewall). So instead of having to reinvent the firewall wheel if you are an AV vendor or whatever, you just hook into WFP.”

Despite this setback, the auction house said bids can still be placed by phone and in-person

CPR said exploit builders in .NET and Python have been employed to deploy this malware

The National Cyber Security Centre launches an opt-in Personal Internet Protection service to safeguard individuals from cyber threats during the upcoming election

Google DeepMind’s SynthID can now be used to watermark AI-generated images, audio, text and video

Santander has warned that customer and employee data has been breached following unauthorized access to a database held by a third-party provider

NCSC CTO argues current market rewards prioritize cost over security, hindering the development of secure technology