Date: October 21, 2026 This post covers three recent security issues that affect widely used web technologies. These are important to address, but they are also manageable. Our development and operations teams are actively working right now to patch and update all customer instances across our networks. Most customers will not need to take any action ... View Post
News
Your Domain Recovery Email Could Lock You Out When You Need It Most
Your domain goes down. So you open the registrar’s login page, discover you need a password reset, and click the link. “Check your email.” The reset went to admin@example.com, BUT the domain you’re trying to fix is example.com. You need working email to regain access. You need access to restore the domain that makes the email work. Meanwhile, customers are ... View Post
You Can’t Reorganize Your Way to DNS Security
Every couple of years a research report lands that gets DNS security mostly right, and then points everybody at the wrong fix. The latest is Enterprise Management Associates’ DDI Directions 2026. On the diagnosis, it’s hard to argue. DNS is under-secured, most of the people running it know it, and the attacks are getting nastier. All true. we’ve been saying ... View Post
Board-Ready: The DNS Security Audit Checklist for Your Next Meeting
What your board doesn't know about DNS could cost them their seats Picture a board meeting. The CISO is presenting the annual security budget. Firewalls, endpoint detection, a 24/7 SOC, penetration testing, cyber insurance. The numbers add up to seven figures. The board nods approvingly. Nobody asks about the $12/year domain name holding it all together. This ... View Post
DomainSure vs Traditional Registrars: A Security Comparison
Let me tell you something we've been saying for over two decades in this industry: Choosing a domain registrar based on price is roughly equivalent to choosing a bank vault based on the color of the door. The sticker price on a domain is the least interesting number in this conversation. What matters is what happens when someone really wants your domain, or your ... View Post
Bridging the Web3 Security Gap With Automated DNSSEC
[TL;DR] Your smart contracts are audited. Your testnet coverage is solid. Your bug bounty is live. None of it matters if an attacker can poison your DNS cache and silently reroute your users before they ever touch your blockchain. The front door to your Web3 platform is a 1980s naming protocol with no built-in authentication — and most projects leave it wide ... View Post






