Loading story…
Texas Attorney General Ken Paxton announced a court-backed action to lock the .com domain of a Dutch pornography website for failing to comply with Texas rules, framing the move as a measure to protect minors from harmful content. The case drew attention because it targeted a globally reachable domain at the registrar or registry layer rather than only blocking access locally, highlighting how legal action in one jurisdiction can disrupt online services across borders.
The suspension became a focal point in NANOG discussions after participants linked it to another recent registrar-level takedown involving Telegram’s shortlink domain, which was reportedly suspended for about a day. Operators debated whether such incidents represent a new DNS vulnerability or a policy issue, but several participants agreed they pose a real operational risk for DNS-dependent organizations and warrant contingency planning for sudden domain loss, registrar action, and broader neutrality concerns around control of major top-level domains.
See the reporting duties and controls this puts on the clock.
2 events from the most recent confirmed update back to the earliest known activity.
In a NANOG mailing list thread, participants debated whether registrar- or registry-level domain suspensions should be treated as a technical DNS resilience issue or primarily a political and policy problem. The discussion referenced the Texas domain lock and Telegram’s temporary shortlink-domain suspension as examples organizations should plan for.
The Texas Attorney General announced a legal victory that locked the .com domain of a Dutch pornography website over alleged noncompliance with Texas rules. This court-backed domain suspension was later cited in NANOG discussion as a registrar-level takedown with cross-border implications.
See what this changes for your reporting obligations and which controls it puts on the clock.
10 references tracked. Mallory keeps watching after this page renders.
seclists.org
Open sourceseclists.org
Open sourceseclists.org
Open sourceseclists.org
Open sourceseclists.org
Open sourceseclists.org
Open sourceseclists.org
Open sourcetexasattorneygeneral.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Silent Push disclosed research dubbed **DangleGeddon** showing that AI can sharply accelerate dangling DNS takeover attacks, in which a DNS record continues pointing to a deleted cloud resource and an attacker recreates that resource to seize the subdomain. Using Claude Opus 5 and automated workflows, the researchers said they processed roughly 12,500 domains, narrowed them to several hundred viable targets, and reached a stage where exploitation could be launched with minimal additional effort. The testing was conducted as a safe proof of concept and affected organizations were notified rather than exploited, but the exposed records reportedly included a U.S. federal government domain as well as assets tied to **Société Générale**, **Ford**, and **Eli Lilly**. Silent Push warned that compromised subdomains could be used for phishing, malware delivery, credential harvesting, and other targeted abuse, and said AI-enabled automation could let nation-state or criminal operators weaponize forgotten DNS records at global scale across government, banking, manufacturing, and pharmaceutical sectors.
Jul 31, 2026
A CSC domain security study reported that many large enterprises continue to leave **domain names and DNS** underprotected, creating an exploitable gap outside traditional perimeter controls. The research highlights how attackers leverage domain weaknesses—such as **lookalike registrations**, **domain hijacking**, and reuse of **lapsed or forgotten domains**—to enable phishing, **business email compromise (BEC)**, malware delivery, impersonation, and traffic redirection, particularly when registrar accounts are compromised. The report found **67% of Global 2000** organizations have implemented fewer than half of recommended domain security measures, despite improvements in email authentication: **DMARC adoption is near 80%**, influenced by regulatory pressure including the EU’s **NIS2** directive. Other protections remain uncommon, including **DNSSEC (~11%)** and **registry lock (<25%)**, increasing exposure to unauthorized domain changes and DNS integrity attacks. DNS availability was also flagged as a resilience risk, with many organizations consolidating on a **single cloud DNS provider** and limited use of **DNS redundancy** (notably among unicorns, where reliance on single-cloud infrastructure is high), while CSC cautioned that using non-enterprise registrars can elevate the risk of hijacking and impersonation.
Jun 29, 2026
A series of high-profile cloud outages disrupted access to critical services across multiple sectors, affecting organizations such as Starbucks, crypto exchanges, and messaging platforms like Signal. The Amazon Web Services (AWS) outage, triggered by a software bug in DynamoDB, led to a 15-hour disruption in Northern Virginia data centers, while a subsequent Microsoft Azure outage was caused by a configuration error in Azure Front Door. These incidents exposed the fragility of digital infrastructure and raised concerns about the concentration of power among a few dominant cloud providers, prompting advocacy groups to call for increased regulatory scrutiny. The outages also underscored the essential role of DNS in business continuity, as failures in DNS resolution prevented customers and internal services from accessing critical database resources. Experts emphasized that DNS, as the foundational protocol for translating domain names to IP addresses, can create widespread disruptions when it fails, regardless of the underlying cause. The events reignited discussions about the need for greater resilience in both cloud and DNS infrastructure to mitigate the impact of future outages on businesses and the broader digital ecosystem.
Jul 3, 2026