News

5 Reasons a Raspberry Pi Belongs in Your Network Lab
5 Reasons a Raspberry Pi Belongs in Your Network Lab
It's not just for Pi Day! From Pi-powered network services to a network sensor/traffic analysis device or home lab management station, the Raspberry Pi is a flexible workhorse that should be the next worthy addition to your lab.
March 11, 2022
Debunking the myths of DNS security
Debunking the myths of DNS security
For years, we’ve been pioneering the use of DNS to enforce security. We recognized that DNS was often a blind spot for organizations and that using DNS to enforce security...
March 1, 2018
jQuery Blog Gets Hacked – Hackers Compromise CoinHive’s DNS
jQuery Blog Gets Hacked – Hackers Compromise CoinHive’s DNS
Earlier today, two hackers going by the online handle of "n3tr1x" and "str0ng" hacked and defaced the official blog (blog.jquery.com) of jQuery.
Oct. 26, 2017
Windows Server DNS Cache: How to Use the Command Line Inspection of Microsoft Windows DNS Cache
Windows Server DNS Cache: How to Use the Command Line Inspection of Microsoft Windows DNS Cache
This post explains how to inspect the contents of windows DNS cache. Inspection can be used to check DNS entries, revealing if any malicious websites are
May 15, 2014
Dynamic Detection of Malicious DDNS
Dynamic Detection of Malicious DDNS
This post was co-authored by Andrew Tsonchev. Two weeks ago we briefly discussed the role of dynamic DNS (DDNS) in a Fiesta exploit pack campaign.
Feb. 11, 2014
A Smorgasbord of Denial of Service
A Smorgasbord of Denial of Service
On October 22, 2013, Cisco TRAC Threat Researcher Martin Lee wrote about Distributed Denial of Service (DDoS) attacks that leverage the Domain Name System
Oct. 25, 2013
DNS Knows. So Why Not Ask?
DNS Knows. So Why Not Ask?
DNS is like the town gossip of the network infrastructure. Computers and apps ask DNS questions and you can ask DNS who has been asking to resolve malware
Oct. 18, 2013
Using DNS RPZ to Block Malicious DNS Requests
Using DNS RPZ to Block Malicious DNS Requests
After delivering several presentations at Cisco Live and Cisco Connect this year, I received a few questions regarding DNS Response Policy Zones (RPZ) and
Oct. 2, 2013
Error Correction Using Response Policy Zones: Eliminating the Problem of Bitsquatting
Error Correction Using Response Policy Zones: Eliminating the Problem of Bitsquatting
A memory error is a condition that occurs any time one or more bits being read from memory have changed state from what was previously written.  By even
Aug. 2, 2013
Foundational Network Traffic Collection and Analysis Setup
Foundational Network Traffic Collection and Analysis Setup
This introductory post explains how one of Cisco’s security research groups established a network data collection capability for large amounts of network traffic. This capability was necessary to support research into selected aspects of the Domain Name Service (DNS), but it can be adapted for other purposes.
May 9, 2013
March Madness May Equal to Malware Madness
March Madness May Equal to Malware Madness
Are you excited about March Madness? Turn on a TV and it will be hard to avoid the games, the news, the commentaries, and the jokes about it. If you
March 29, 2013
Chronology of a DDoS: SpamHaus
Chronology of a DDoS: SpamHaus
Around 12:00 GMT March 16, 2013, a distributed denial of service (DDoS) attack took offline both the spamhaus.org website and a portion of its e-mail
March 28, 2013