Explore tweets tagged as #bind9
🚨 Critical BIND9 flaw puts 5,900+ DNS servers at risk. CVE-2025-40778 (CVSS 8.6) lets attackers poison resolver caches and redirect traffic to fake sites. A public PoC is out—patch now and lock recursion to trusted clients. Full details ↓ https://t.co/h2Z5npBwsT
#ThreatsDay
1
54
142
Relevant Operational Notification from ISC, the makers of Bind9:
0
3
6
📢 新コース公開! 💻【手を動かして学ぶWeb三階層モデル構築】 🧩 BIND9・Nginx・SpringBoot・PostgreSQLの構築と連携を仮想環境で実践! 🤖 AI時代に強い“仕組みを理解する力”を養おう。 🔗 https://t.co/yyOx4kRgOV
#Udemy #Webエンジニア #サーバー構築 #インフラエンジニア #Java学習 #Nginx
0
1
5
CVE-2025-40778 - Today we go with 1-day #pruva repro for BIND9 High serverity issue. https://t.co/7Cu9Vyf6pr A vulnerable BIND 9 resolver (version 9.18.39) accepts and caches resource records that were not requested in the original DNS query. An off-path attacker who can race
3
14
59
Présentation de l'outil OctoDNS qui permet de gérer simplement vos enregistrements DNS et supporte de nombreux providers (Route53 AWS, CloudDNS Cloudflare, PowerDNS, Bind9...) - Article dans Linux Pratique (mars 2023) par Julien Briault @ju_hnny5
https://t.co/1Tmd01k7Hs
0
6
28
Bind9 is literally all you need to integrate authoratatively with DNS Root servers for any domain name. Lavalamps didn't provide enough entropy, we use blobs. ; )
0
0
1
We added CVE-2025-40778 BIND9 tagging (potential susceptibility to cache poisoning) to our DNS scans: https://t.co/pQuzD8PVKu We found nearly 8898 unpatched DNS open resolvers on 2025-10-30, down to 6653 on 2025-11-01: https://t.co/syQkzugRJD Patch info: https://t.co/p3rdrXyTpc
1
12
22
Brimble has it's own nameserver setup https://t.co/peYP8BRkYS and https://t.co/7MnjDjGGyk We didn't want to use any dns service provider from thirdparty software, so it was from the groundup, with a very good leverage from the bind9 software. Shitty docs, but you literally have
6
17
136
Day 2 of Improving my infra: - Installed Hypervisor (Proxmox) - Setup Local DNS Resolution with Bind9 - Migrated my network from newbie 193.168.* to different private ip - Setup basic database services
2
2
37
این ماجرا به اسم XZ Backdoor شناخته میشه (شناسه CVE-2024-3094) لازم به ذکر هست نه تنها SSH بلکه Bind9 (وisc-dhcp) هم آلوده شدن. با بروزرسانی مشکل حل میشه و البته میشه حدس زد با Harden کردن SSH و سیستم عامل «موقتی» قابل دفاع است. اگر liblzma یا xz 5.6 داشته باشید،سیستم آلوده شده!
ماجرا از این قراره که یکی از مهندس های مایکروسافت، متوجه تاخیر 500 میلی ثانیه ای (!) در لاگین ssh میشه و شک میکنه. با بررسی بیشتر، متوجه میشه که یک backdoor در liblzma کار گذاشته شده که احتمالا sshd رو هدف قرار میده. خبرش کل جامعه اوپن سورس رو در شوک فرو برده. 1/2
0
3
36
CVE-2025-40780 - BIND9 again - Cache poisoning due to weak PRNG Report: https://t.co/mMHmU8zjct This was a tough one, #pruva went down the rabbit hole using Z3 solver. Several solver scripts were generated and iteratively tuned; the agent captured port/ID streams and
0
4
28
Chapter #20: Setting Up a Caching DNS Server In this chapter, you'll learn how to configure a recursive caching DNS server on Linux using BIND9. The guide covers setting up forward and reverse zones, configuring MX and PTR records, and securing your DNS server with appropriate
6
18
90
Vakar ISC novērsis sešas ievainojamības, kas ietekmē BIND9 programmatūru: CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-6516 CVE-2023-50387 CVE-2023-50868 Jaunās BIND9 versijas ir pieejamas: https://t.co/gcY9m4K8XZ Vairāk: https://t.co/9xyJCMIcXF
0
3
3
کلادفلر سوْرونوندان دوْلایی توییتر آچیلمیردی، DNS و Bind9 ایله ایلگیلی بیر شی یازماق ایستییردیم، سوْنرا «کیم اوْخویاجاق!» دئییب بو بوْش و ضررلی فیکیرلری ذهنیمدن سیلدیم.
1
2
31
ISC released urgent patches for three BIND 9 flaws. Two cache poisoning bugs (CVE-2025-40780/40778) allow remote DNS spoofing on resolvers by predicting query IDs or injecting forged records. #BIND9 #DNSSecurity #CachePoisoning #PatchNow
https://t.co/WH2Q5AvVqp
0
6
6
⚠️#INCIBEaviso |#BIND9 tiene disponible una nueva actualización que soluciona múltiples vulnerabilidades de severidad alta que podrían poner en riesgo el sistema. ➕ℹ️: https://t.co/qGx8YMBSAA
#AvisosDeSeguridad #TI
0
1
0
Haute disponibilité DNS avec BIND9 : déploiement pas à pas sur Linux
0
7
17