#dns
2 articles
Security Alerts Nov 12, 2026
CVE-2026-19422: Authentication Bypass in ManageEngine DDI Central
An unauthenticated attacker in ManageEngine DDI Central before build 6301 can impersonate an onboarded Windows DNS or DHCP server and make unauthorized changes to DNS zones and DHCP scopes...
Knowledge base Dec 1, 2025
ClickFix and DNS Staging — A Social Engineering Attack That Turns nslookup into a Weapon
ClickFix with DNS staging bypasses security controls by weaponizing nslookup. Learn the infection chain, attack mechanism, and the most effective defense methods.