For providers

CVE: CVE-2026-10723 Title: Incorrect acceptance of NSEC3 records Document version: 2.0 Posting date: 22 July 2026 Program impacted: BIND 9 Versions affected: BIND 9.18.0 -> 9.18.50 9.20.0 -> 9.20.24 9.21.0 -> 9.21.23 BIND Supported Preview Edition 9.11.3-S1 -> 9.18.50-S1 9.20.9-S1 -> 9.20.24-S1 Severity: Medium Exploitable: Remotely Description: BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. Impact: An att ...

CVE: CVE-2026-13204 Title: Unexpected exit in certain situations with NSEC and NSEC3 both present Document version: 2.0 Posting date: 22 July 2026 Program impacted: BIND 9 Versions affected: BIND 9.11.0 -> 9.18.50 9.20.0 -> 9.20.24 9.21.0 -> 9.21.23 BIND Supported Preview Edition 9.11.3-S1 -> 9.18.50-S1 9.20.9-S1 -> 9.20.24-S1 Severity: High Exploitable: Remotely Description: If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for ...

CVE: CVE-2026-12617 Title: Record ordering based unexpected exit with CNAME or DNAME Document version: 2.0 Posting date: 22 July 2026 Program impacted: BIND 9 Versions affected: BIND 9.18.0 -> 9.18.50 9.20.0 -> 9.20.24 BIND Supported Preview Edition 9.18.11-S1 -> 9.18.50-S1 9.20.9-S1 -> 9.20.24-S1 Severity: High Exploitable: Remotely Description: The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Sp ...

CVE: CVE-2026-11605 Title: Unnecessary validation of DNSSEC signed records Document version: 2.0 Posting date: 22 July 2026 Program impacted: BIND 9 Versions affected: BIND 9.20.0 -> 9.20.24 9.21.0 -> 9.21.23 BIND Supported Preview Edition 9.20.9-S1 -> 9.20.24-S1 Severity: High Exploitable: Remotely Description: The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A quer ...

CVE: CVE-2026-11331 Title: Potential wildcard CNAME RPZ policy bypass Document version: 2.0 Posting date: 22 July 2026 Program impacted: BIND 9 Versions affected: BIND 9.16.0 -> 9.18.50 9.20.0 -> 9.20.24 9.21.0 -> 9.21.23 BIND Supported Preview Edition 9.16.8-S1 -> 9.18.50-S1 9.20.9-S1 -> 9.20.24-S1 Severity: High Exploitable: Remotely Description: An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLO ...

CVE: CVE-2026-13321 Title: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field Document version: 2.0 Posting date: 22 July 2026 Program impacted: BIND 9 Versions affected: BIND 9.11.0 -> 9.18.50 9.20.0 -> 9.20.24 9.21.0 -> 9.21.23 BIND Supported Preview Edition 9.11.3-S1 -> 9.18.50-S1 9.20.9-S1 -> 9.20.24-S1 Severity: High Exploitable: Remotely Description: The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. Impact: ...

CVE: CVE-2026-10822 Title: Key Record using PRIVATEDNS algorithm may lead to unexpected exit Document version: 2.0 Posting date: 22 July 2026 Program impacted: BIND 9 Versions affected: BIND 9.18.0 -> 9.18.50 9.20.0 -> 9.20.24 9.21.0 -> 9.21.23 BIND Supported Preview Edition 9.18.11-S1 -> 9.18.50-S1 9.20.9-S1 -> 9.20.24-S1 Severity: Medium Exploitable: Remotely Description: If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subseq ...

European and US banks inadvertently transmitted customer data to ad platforms via tracking pixels, raising serious compliance, security, and privacy concerns.

Here's some insight into how Google must comply with the European Commissions's Digital Markets Act.

The agent abused the victim’s Docker daemon to access and encrypt AI-related files.