Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Sophos Firewall: DNS enhancements

Oct 19, 2026 By Sophos In Sophos
Sophos Firewall v23 brings new DNS enhancements including DNS-over-HTTPS (DoH) support, DNS security extension (DNSSEC) support, and one-click Secure DNS set up, made possible through native integration with Sophos Fusion. Learn about the new enhancements and the steps to set up Secure DNS Protection, third-party DNS services, and DNSSEC protection. Ask questions and get expert answers in the Sophos Community.
View Video
cloudflare

The keys to the Internet change on October 11. Are you ready?

Oct 6, 2026 By 1.1.1.1 In Cloudflare
On October 11, 2026, the DNS root is scheduled to change its key-signing key (KSK) for only the second time ever. This key anchors DNSSEC’s chain of trust, which lets DNS resolvers authenticate answers using cryptographic signatures. The change is called a KSK rollover. Validating resolvers need to trust the new key before the switch, as otherwise healthy websites could become unreachable.
Read Post
certkit

What's taking DNS-PERSIST-01 so long?

Oct 5, 2026 By Todd H. Gardner In CertKit
In February, Let’s Encrypt announced that DNS-PERSIST-01 was coming, “some time in Q2 2026.” It’s October, and it’s nowhere close to ready. We’ve been waiting for DNS-PERSIST-01 since January, along with every other ACME client and lots of organizations. DNS-PERSIST-01 promised to simplify domain validation and make automation easier, but we had to wait on Let’s Encrypt. Let’s Encrypt is waiting on a redesign, a standards body, and maybe one more vote.
Read Post
UTMStack

DNS Log File Your Guide to Uncovering Hidden Threats

Jul 2, 2026 By cesmng In UTMStack
Your firewall says nothing is wrong. Your EDR has a few low-confidence alerts. Users aren't reporting outages. But something still feels off. That's the exact situation where a DNS log file stops being “just another log” and turns into one of the most useful artifacts in the environment. Attackers lean on DNS because every network depends on it, it is often treated as background noise, and suspicious lookups can blend into legitimate traffic for a long time.
Read Post
10 Best SPF Checker Tools For Validating Your Email DNS Records

10 Best SPF Checker Tools For Validating Your Email DNS Records

Jun 25, 2026 By SecuritySenses In SecuritySenses
Ensuring robust email authentication is fundamental to protecting your domain name from email spoofing and phishing attacks. Central to this defense is the Sender Policy Framework (SPF), an authentication protocol designed to validate authorized IP addresses allowed to send emails for your domain. To maintain SPF compliance and maximize email deliverability, leveraging the right set of SPF checker tools is crucial. This section highlights the 10 best SPF validation tools that ensure your SPF records in DNS are error-free, up-to-date, and provide effective risk assessment against email-based threats.
Read Post
manageengine

AD, AD domains, and primary domain controllers: The backbone of enterprise identity-and why DNS keeps it alive

Jun 16, 2026 By [email protected] In ManageEngine
At some point, every enterprise faces the same quiet operational nightmare: hundreds of users, thousands of devices, multiple locations, and someone in the IT department manually managing who gets access to what. Active Directory (AD) was Microsoft's answer to that problem when it shipped with Windows 2000, and it remains, over two decades later, the dominant identity and access infrastructure in enterprise networks worldwide.
Read Post
manageengine

Centralized DNS security policies for protecting remote and roaming clients with DDI Central

Jun 5, 2026 By Akshra GJ In ManageEngine
For decades, enterprise security architecture rested on a comforting fiction: that inside the network and outside the network meant something. The user on the corporate LAN was protected. The user anywhere else was somebody else's problem. Then the workforce stopped sitting still. Hybrid work, branch sprawl, BYOD, contractor laptops, field engineers, sales teams permanently on the road—your workforce stopped being a place and became a population.
Read Post
manageengine

DNS anomaly detection with machine learning: How ManageEngine DDI Central stops threats before they start

Apr 24, 2026 By Akshra GJ In ManageEngine
Most breaches don't announce themselves; they whisper. A subtly malformed DNS query here. A DHCP lease request that looks almost normal there. A client that suddenly requests a domain no one in your organization has ever heard of. By the time these whispers become alarms on a SIEM dashboard, attackers have often already moved laterally, exfiltrated data, or cemented persistence. In traditional DNS, DHCP, and IPAM (DDI) setups, these signals are buried under millions of legitimate transactions.
Read Post
cloudflare

Our ongoing commitment to privacy for the 1.1.1.1 public DNS resolver

Apr 1, 2026 By Rory Malone In Cloudflare
Exactly 8 years ago today, we launched the 1.1.1.1 public DNS resolver, with the intention to build the world’s fastest resolver — and the most private one. We knew that trust is everything for a service that handles the "phonebook of the Internet." That’s why, at launch, we made a unique commitment to publicly confirm that we are doing what we said we would do with personal data.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.