Threat Intelligence

Blogs

Phantom Squatting: When LLMs’ Hallucination Becomes an Attacker’s Best Friend

As AI reshapes cybersecurity, attackers are exploiting a fundamental weakness in large language models. Phantom squatting turns hallucinated domain names into trusted attack vectors, creating a new class of DNS abuse that defenders cannot solve by eliminating hallucinations alone.

Who Registers the Domain That Steals Your Data? The Registrar Accountability Gap in India’s DNS Abuse Crisis

India's DNS abuse crisis exposes a registrar accountability gap: malicious domains remain online while vulnerable users bear the cost. Concentrated abuse patterns suggest stronger oversight and faster mitigation could significantly reduce predictable harms nationwide today.

What the Interisle Report Reveals, and What It Doesn’t, About DNS Abuse

Interisle's report illuminates malicious registration trends, but its broad blocklist methodology measures different questions than DNS Abuse, complicating conclusions about registry and registrar accountability by conflating reputation signals with actionable domain enforcement decisions for policymakers.

When AI Writes the Scam: How Artificial Intelligence Is Making DNS Abuse Harder to Detect

Artificial intelligence is transforming phishing and DNS abuse, erasing the linguistic clues that once exposed scams. As attacks become personalised, automated and multilingual, governance frameworks are struggling to keep pace with a rapidly expanding threat surface.

What Third-Party Domain Registrations Reveal About World Cup 2026 Risks

Third-party domain registrations tied to FIFA are surging ahead of the 2026 World Cup, revealing how major events fuel brand abuse, customer confusion, and fraud, from fake ticket sites to sophisticated scams timed to exploit peak fan interest.

The Pending Encryption Crisis: Quantum Computing’s Threat to Today’s Data

Quantum computing is advancing toward a point where today's encryption could fail, exposing years of stored data. While post-quantum defenses are emerging, experts warn that hackers are already stockpiling sensitive information for future decryption.

Cybercriminals are Driving Significant Domain Name Market Demand

Cybercriminals are becoming a major force in the domain-name market, driving an estimated one-fifth of new gTLD registrations in 2025 and exposing how commercial incentives, weak enforcement, and scale continue to fuel online abuse.

From Uptime to Trust: The Domain Security Strategy Behind Business Continuity

Domains and DNS underpin modern business operations, yet security gaps remain widespread. CSC's latest research shows why stronger domain protections are essential to resilience, helping companies reduce disruption, safeguard trust, and maintain continuity when attacks strike.

Fake Domains, Real Harm: The Data Behind India’s DNS Abuse Crisis

New data on DNS abuse reveals most malicious domains remain active beyond 24 hours, while a handful of registrars host the bulk of infrastructure, leaving India's population of first-generation internet users uniquely exposed to fraud.

dotBrand Domains as Trust Infrastructure in the Age of AI

As AI agents automate phishing, impersonation and domain abuse at machine scale, the Brand Registry Group argues that dotBrand domains are evolving from marketing assets into trust infrastructure underpinning cybersecurity, identity and interactions across the internet.

Time Sovereignty: Internet Policy and Defense Frameworks for Critical Infrastructure Synchronization Under Geopolitical Conflict

As power grids depend on microsecond precision, states must treat time synchronization as sovereign infrastructure, hardening satellite, fiber and orbital defenses against hybrid attacks that could trigger catastrophic blackouts through resilient sovereign time defense frameworks.

Online Safety and AI

As AI reshapes the digital world, online safety depends on balancing smarter protection with growing risks. From cybersecurity to privacy concerns, understanding AI's role can help users stay secure, informed, and resilient online.

Procedural Resilience or Technological Rigidity? Reassessing Article 19’s DNS Abuse Framework in the Post-MLAT Era

As cross-border cyber enforcement falters, critics argue Article 19's DNS abuse framework prioritizes procedural purity over user protection, leaving courts too slow to counter AI-driven phishing, rapid-flux domains, and increasingly automated online threats.

DNS Abuse Is Stealing India’s Youth: Fake Domains and the Job-Seeking Trap

Fake recruitment websites exploiting India's young job seekers are proliferating, exposing millions to identity theft, financial fraud and malware while regulators, registrars and digital literacy programs struggle to keep pace with a growing labor market.

Fixing Geofeed: From Self-Reported Data to Verified Trust

Geofeed data, long reliant on unverifiable self-assertions, faces mounting security risks. Integrating RPKI could transform it into a trusted, cryptographically validated infrastructure, strengthening routing integrity, regulatory compliance, and digital sovereignty across an increasingly contested internet.

News Briefs

Microsoft Launches AI Cybersecurity Model to Boost MDASH Performance and Cut Costs

FBI Warns of Russian Cyber Campaign Targeting Vulnerable Routers

UK Unveils AI Cyber Shield to Counter Machine-Speed Digital Threats

Researchers Uncover Browser-Based SSD Side Channel That Can Track User

Iran Threatens Subsea Internet Cables in the Strait of Hormuz

AI-Driven Cyber Threats Are Growing, Google Warns

Steven Bellovin Takes Aim at Cybersecurity Myths in New Book

Iran-Linked Cyberattacks Expose Fragility of America’s Industrial Nerve System

Iran Targeted by Self-Propagating Malware in Supply-Chain Cyberattacks

Kadnap Malware Infects 14,000 Routers Worldwide, Designed to Resist Takedowns Experts Warn

PIR Launches New Institute to Combat DNS Abuse

DNSSEC Now Deployed in all Generic Top-Level Domains, Says ICANN

Backlash Over Potential Firing of U.S. Election Cybersecurity’s Top Official

New Data Reveals Phishing Attacks Are Bigger Than Reported, Exact Size of Problem Unknown

CENTR Has Released an Animated Video on ccTLDs and Their Technical Role Concerning Content

Trust Has Eroded Within the Cybercriminal Underground Causing a Switch to Ecommerce Platforms

Google Reports 18 Million Daily COVID-19 Related Malware, Phishing Emails Per Day

Zoom Faces Class-Action Lawsuit, Accused of Overstating Its Privacy Standards

Over 360 Security Experts Around the World From Group to Combat COVID-19 Hackers, Protect Hospitals

Firefox Starts the Roll Out of DNS Over HTTPS (DoH) by Default for US-Based Users

Most Viewed

Most Commented

Taking Back the DNS

Fake Bank Site, Fake Registrar

When Registrars Look the Other Way, Drug-Dealers Get Paid

Who Is Blocking WHOIS? Part 2

ICANN Complaint System Easily Gamed

Industry Updates

Participants – Random Selection