Ask ChatGPT where to log into your company's customer portal. Do it a few times, in a few different phrasings, and sooner or later it hands back a URL that looks plausible and does not exist. Criminals run the same exercise at scale and register the answers. What Unit 42 Found Palo Alto Networks' Unit 42 published the numbers in June. They ran 913 ... View Post
Our latest blog posts
Ask Your CTO Who Runs Your DNS. Watch What Happens.
Try asking this question at your next leadership meeting: “Who runs our DNS?” Then watch. There will be a pause. Somebody will offer to check. Somebody else will name a vendor, usually whoever registered the domain a decade ago, and nobody in the room will be able to say when that vendor was last looked at. We've been running a domain registrar and managed DNS ... View Post
You Can’t Reorganize Your Way to DNS Security
Every couple of years a research report lands that gets DNS security mostly right, and then points everybody at the wrong fix. The latest is Enterprise Management Associates’ DDI Directions 2026. On the diagnosis, it’s hard to argue. DNS is under-secured, most of the people running it know it, and the attacks are getting nastier. All true. we’ve been saying ... View Post
The Problem With Following DNS Security “Best Practices” That Everyone Else Is Already Following
Attackers trying to compromise your domain infrastructure have read the same security frameworks you have. They know what NIST recommends. They know what CIS benchmarks look like. They test their exploits against compliant configurations before they deploy them. When everybody follows the same playbook, the playbook becomes a roadmap for your adversaries. ... View Post
Board-Ready: The DNS Security Audit Checklist for Your Next Meeting
What your board doesn't know about DNS could cost them their seats Picture a board meeting. The CISO is presenting the annual security budget. Firewalls, endpoint detection, a 24/7 SOC, penetration testing, cyber insurance. The numbers add up to seven figures. The board nods approvingly. Nobody asks about the $12/year domain name holding it all together. This ... View Post
DomainSure vs Traditional Registrars: A Security Comparison
Let me tell you something we've been saying for over two decades in this industry: Choosing a domain registrar based on price is roughly equivalent to choosing a bank vault based on the color of the door. The sticker price on a domain is the least interesting number in this conversation. What matters is what happens when someone really wants your domain, or your ... View Post






