Cybersecurity

It’s About Connectivity Not The Internet!

I've been trying to avoid writing about the Internet as such. With as "At the Edge" I'm looking at larger issues but can't escape writing more directly about the Internet. It seems as if everyone wants a say in Internet policy without distinguishing between technical and social issues. Today the term "The Internet" or, for many simply "Internet" is more of brand than a term for a specific technology and its implications. It has become too easy to talk about the Internet in lieu of understanding. We also see the converse -- a failure to recognize "Internet" issues. more

ICC Paper on Clearing Up Confusion Over Internet Governance

I just wanted to call people's attention to this International Chamber of Commerce (ICC) paper on Internet governance. I don't endorse it; haven't actually read it yet, but their say will play a big role and should be widely known: "Coming barely a month after the World Summit on the Information Society (WSIS) in Geneva, and prepared by ICC's Commmission on E-Business, IT and Telecoms, the paper divides the issue of Internet governance into three main components - technical engineering, coordination of the names and numbers system and public policy matters." more

TLD Operators: Cleaning Up Lame Delegations

ICANN's Security and Stability Advisory Committee (SECSAC) recently released some recommendations regarding the DNS infrastructure, specifying among other things, that sub-zone delegation be kept up-to-date. ...The SECSAC report doesn't mention, but I believe is trying to address, is the alarming fact that nearly 10% of the name servers listed in the root zone are lame, either they aren't authoritative for the zones they are supposed to be, or they are unreachable much of the time.
 more

The Future of Email

While people may debate the death of email, there is no question that many email servers are already overloaded with spam. Current spam solutions are beginning to address the problem, but so far they all suffer from the arms race issue - as fast as we come up with new ways to fight spam, spammers are finding new ways to deliver it to us. While the functionality of email will certainly continue, the current system must change. When the change comes, it will deliver the future of email to Microsoft. more

Breaking the Internet’s Consensus Rule

The Internet, ultimately, is a fragile thing, as an entity. It depends upon the consensus of those responsible for its infrastructure to operate on a daily basis. Because of the inherent robustness as a technical architecture, there is no entity that can "break the Internet" in the sense of stopping the flow of traffic, but there are several entities that can create a variety of inconveniences, some minor and some serious, for the millions who use the Internet. more

Unfolding Forensics of a Lawfare Train Wreck: The EU CRA

The EU Cyber Resilience Act faces mounting implementation challenges involving cybersecurity standards, vulnerability reporting, regulatory overlap and fundamental rights. The author argues that its expansive obligations risk undermining the regulation's effectiveness and enforceability. more

DNS Abuse and Criminal Infrastructure: Beyond Definitions and Blocklists

Research suggests criminals may control a striking share of newly registered gTLD domains, raising questions about whether ICANN's definitions, contractual safeguards and enforcement mechanisms are keeping pace with the industrial scale of technology-facilitated harm. more

What Reagan-Era Cyber Strategists Can Teach America Today

Reagan-era cyber strategists anticipated today's transnational threats, proposing international treaties, public-private cooperation and infrastructure protections. As America again considers aggressive action against cybercriminals, their largely forgotten blueprint offers both lessons and warnings. more

The Dual-Front Challenge: Why Route Security (RPKI) is the Prerequisite for Quantum Readiness (PQC)

Internet security risks advancing unevenly: post-quantum cryptography may protect data while vulnerable routing still enables hijacks. Universal RPKI adoption, paired with cryptographic agility, is essential to build an Internet trust architecture ready for quantum threats. more

The Web Has Become a Content Delivery Network

Cyberattacks, AI scraping and relentless bot traffic have transformed CDNs from performance tools into the Web's defensive gatekeepers, reshaping Internet architecture, governance and control as private intermediaries increasingly determine which requests reach origin servers first. more

The Business Value of dotBrand: Twelve Real-World Success Stories

Twelve real-world dotBrand success stories show how organizations strengthen trust, improve security, simplify customer experiences, and create measurable business value. From AI-driven innovation to global digital ecosystems, dotBrand domains are becoming essential infrastructure worldwide today. more

What the i2Coalition Article Misses About DNS Abuse

Authors defend research showing malicious domain registrations occur at industrial scale, arguing that blocklist data is reliable and that policymakers must prioritize prevention alongside mitigation to curb cybercriminal exploitation of the domain name market globally. more

What the Interisle Report Reveals, and What It Doesn’t, About DNS Abuse

Interisle's report illuminates malicious registration trends, but its broad blocklist methodology measures different questions than DNS Abuse, complicating conclusions about registry and registrar accountability by conflating reputation signals with actionable domain enforcement decisions for policymakers. more

Domain Security Report: Unicorns Show Strong Adoption in Key Domain Security Measures

Unicorn firms lead in DNS-based security adoption, signaling technical maturity, while Global 2000 rely on enterprise registrars. Gaps in redundancy and brand protection expose supply chain risks as cyberattacks intensify across industries globally today. more

Iran-Linked Cyberattacks Expose Fragility of America’s Industrial Nerve System

Iran-linked hackers infiltrated US industrial control systems, disrupting energy and water infrastructure. The attacks highlight systemic vulnerabilities in internet-connected devices and signal an enduring cyber threat despite easing geopolitical tensions. more