dns
5 stories
Cavern C2 Framework Evolves With DNS and Google Apps Script
Researchers have identified new components in the Cavern command-and-control framework, which is being used by Iranian nation-state actors. The framework now leverages DNS and Google Apps Script to disguise its malicious traffic as legitimate activity. This evolution aims to enhance its stealth capabilities in ongoing attacks targeting entities in Israel.
Censys Internet Map links real-time DNS data to internet infrastructure
Censys has enhanced its Internet Map by integrating real-time DNS data. This allows security professionals to easily correlate domain names with the underlying internet infrastructure. The update aims to streamline investigations by consolidating information previously spread across multiple tools into a single platform.
DNSFilter makes its DNS threat protection available to OEM partners
DNSFilter is now offering its DNS threat protection and privacy solutions to original equipment manufacturers (OEMs). This program allows other companies, such as ISPs and device makers, to integrate DNSFilter's services into their own products. Partners can opt for DNS-layer threat blocking or full-device encryption and privacy services, or both.
Uncommon NIMLOC DNS Record Type Observed
The SANS Internet Storm Center has published an entry discussing the uncommon NIMLOC DNS record type, which has been observed appearing in network logs.
Bringing Rust to the Pixel Baseband
Google is enhancing the security of its Pixel devices by integrating a memory-safe Rust-based DNS parser into the cellular modem firmware. This move aims to mitigate memory-safety vulnerabilities, a significant risk in the complex and remotely attackable modem code. The company hopes this initiative will encourage the wider adoption of memory-safe languages in low-level system programming.