NIST has released updated DNS security guidance for the first time in over a decade, addressing critical infrastructure protection alongside a surge in supply chain and AI-related vulnerabilities.
Key points
- NIST published SP 800-81r3, the Secure Domain Name System Deployment Guide, replacing the 2013 version.
- TeamPCP compromised LiteLLM packages on PyPI, while CISA warned of active exploitation in Langflow and Aqua Security’s Trivy.
- The FCC banned the import and sale of new foreign-made routers due to national security concerns.
- NVIDIA donated its Dynamic Resource Allocation (DRA) Driver for GPUs to the Cloud Native Computing Foundation.
- Mandiant’s M-Trends 2026 report found that attackers now hand off access in as little as 22 seconds.