hijacking.gov.uk - Identifying and Communicating Risks to the Digital State
Talkat Global Security Vulnerability Summit @ Open Source Summit North America 2022 · on Friday, 2022-06-24· at 14:50· Room 205 (Level 2), JW Marriott Austin, 110 E 2nd Street Austin, TX 78701·
summary
UK government domains contain frequent, concrete risks: over 300 registrars gives attackers many weak links, dangling CNAMEs and typo'd name servers lead to full domain takeover, and one incident briefly served porn while a determined attacker could exfiltrate credentials. A team builds a mass scanner in a weekend to find Log4j exposures and uses heuristics plus machine learning to flag DNS changes and insider-style tampering. Outreach enforces role-based WHOIS emails and landline contacts; fixes are rapid when owners can be reached.
AI-written summary · about
chapters (5)
- 0:00Start
- 0:53How Do We Protect these Domain Names
- 6:24Name Servers
- 8:48Summary
- 10:25How Do We Communicate Risk
related talks
47mDNS On Fire
40mCritical DNS & Domain Name Security Intelligence to Thwart Cyberattacks
22mDNS is Under Attack - the Miscreant's Offensive Playbook with a Defensive Counter
19mCloudy with a Chance of Cyberattacks: Dangling Resources Abuse on Cloud Platforms
32mSomething’s Phishy: See the Hook Before the Bait
59mWaking Up The Guards: Renewed Vigilance Is Needed To Regain Trust
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
29mThe Ever-Changing Labyrinth: A Large-Scale Analysis of Wildcard DNS Powered...