DNS

ICANN Reports Persistent Acceptance Gaps for Internationalized Domains

ICANN reports 151 internationalized top-level domains and 4.3 million second-level registrations, but persistent Universal Acceptance gaps still prevent some applications, websites and email systems from reliably handling internationalized names. more

ICANN Commenters Urge Limits on Proposed Domain Abuse Checks

ICANN commenters broadly support proposed registrar checks of domains associated with known DNS abuse but urge evidentiary safeguards to prevent weak associations from triggering action against legitimate domains. more

ICANN Comment Period Closes on Linking gTLDs With Alternative Naming Systems

ICANN is closing consultation on technical rules for linking gTLDs with matching alternative naming systems, as commenters debate controller requirements, security safeguards, policy boundaries and protections for existing registrations. more

A Domain Is Registered. But Is It Really Unavailable?

RFC 10023 standardizes a DNS TXT record that lets domain holders signal a registered name is for sale, giving registrars, marketplaces, brokers and search tools a machine-readable way to distinguish registration from purchase availability. more

Cyberattackers Are Using AI Across More of the Kill Chain, Anthropic Reports

Anthropic says attackers are increasingly using AI agents to orchestrate cyber operations, automating reconnaissance, exploitation, data theft and malware adaptation while lowering the expertise and resources previously required for sophisticated attacks. more

How Domain Abuse, Social Media, and AI Fuel Brand Attacks

CISOs expect social media impersonation to become their leading cybersecurity threat as attackers increasingly combine AI-enabled deception, executive impersonation, and domain abuse across multiple channels to conduct fraud and steal sensitive information. more

The Reporting Gap: What Happens Between a DNS Abuse Complaint and a Takedown

DNS abuse enforcement can stop abusive domains and drive systemic registrar reforms, but reporting barriers, inconsistent response times, and poorly documented complaints leave many phishing sites active before actionable cases ever reach enforcement. more

Caribbean-Born Niel Harper Joins ICANN Board, Sets Out Priorities in Q&A

Barbados-born cybersecurity specialist Niel Harper joins ICANN's board in October, aiming to strengthen Latin American and Caribbean participation, improve DNS security and abuse mitigation, and expand developing-economy access to the next gTLD round. more

ICANN Sets Guidelines to Advance Universal Acceptance of Internationalized Domains and Email

ICANN's new Universal Acceptance guidelines target persistent interoperability gaps that prevent internationalized domain names and email addresses from working reliably across browsers, identity systems, applications and other Internet infrastructure. more

15th Registration Operations Workshop, September 29, 2026, 13:00 - 17:00 UTC

The 15th Registration Operations Workshop convenes domain name and DNS professionals September 29 for technical sessions on mTLS, RPKI, DNS resilience, delegations, DNSSEC, registrar concentration, dispute proceedings and alternative naming systems. more

From Forgotten to Exploited: How AI Changes the Dangling DNS Threat

Dangling DNS records can expose trusted corporate subdomains to takeover, while AI-assisted reconnaissance makes abandoned resources easier to find, increasing the need for continuous DNS monitoring rather than periodic audits. more

Thirty-Five Years Later, Moscow Comes Looking for the Soviet Union’s Domain

Russia is imposing state identity verification on .su, the Soviet Union's surviving domain, as researchers uncover criminal infrastructure across the namespace and ICANN pursues a retirement process that could eventually remove it from the global root. more

ICANN’s New Data Sharpens the Picture of DNS-abuse Enforcement

ICANN's updated DNS-abuse data distinguishes allegations from actionable complaints and malicious registrations from compromised domains, offering a clearer test of whether tougher contractual requirements are strengthening enforcement or simply generating a larger volume of reports. more

Publishing DMARC Is Not the Same as Operating It

Publishing a DMARC record is only the beginning. New data show that many domains lack enforcement or reporting, exposing a gap between adopting email authentication and operating it effectively enough to detect problems and deter impersonation. more

Beyond Protocol and Policy: Why Project Jake is Reshaping the Architecture of Internet Trust

Project Jake aims to bridge the divide between internet protocols and policy, offering registries, law enforcement and rights holders a decentralised framework for accessing domain-registration data securely while navigating privacy laws and institutional gridlock. more