Domain and DNS resources for enterprise business, digital and IT Leadership.

Healthcare was the most cyber-attacked industry vertical in 2023, surpassing banking & finance. This paper examines external DNS management as a known, and under-addressed vulnerability. We show how IT security frameworks like ISO, SOC II, CIS, and NIST are not always followed by healthcare organizations, and we lay out best practices to address these issues. This white paper includes our first-ever 2024 Healthcare DNS Security Benchmark Report.

Assessing and consolidating domains and DNS providers are crucial “pre” and “post” M&A deal priorities. In corporate acquisitions, you’re not only buying a company’s assets – you’re also buying their cyber security risk.  In this paper we discuss how due diligence teams can maximize deal value and mitigate post-close risk and cost.

Lack of functional ownership over domain and external DNS security, combined with a lack of unified control systems to enforce DNS security policies are the top factors that expose your company and customers to external DNS vulnerabilities.

The Bank did not apply for their Brand TLD in ICANN’s 1st round. They lacked insights into strategies and business applications for a Brand TLD extension. They sought strategic guidance from subject matter experts and competitive intelligence related to use of domains. They also sought to establish best practices for domain policies & procedures.

The CBC owns a corporate portfolio of several hundred domain names. They held their domains with a large corporate registrar and were looking for increased domain management capabilities, features and value. They also wanted to consolidate several DNS services both on legacy internal DNS systems and third party Managed DNS services.

G Adventures owns a corporate portfolio of several hundred domain names, growing via acquisition. They’ve accumulated domains over the years. IT, digital marketing and business leadership registered domains without processes or systems. This led to a fragmented, hard-to-manage list of domains spread over numerous registrar vendors. It was time to clean up the mess.

Researchers at Guardio Labs have discovered a massive email ad fraud campaign based on thousands of hijacked domains and subdomains. Threat actors are carrying out SPF-hijacking to bypass spam security by leveraging legitimate domains to send millions of emails for malvertising and click scams for at least 16 months.

Domain registrar MarkMonitor had left more than 60,000 parked domains vulnerable to domain hijacking.

According to new research, cyber-attacks using DNS channels to steal data, DDoS victims, and deploy malware have grown in volume and cost throughout the pandemic.