Operations | Monitoring | ITSM | DevOps | Cloud

BIND 9 CVE-2026-1519: The NSEC3 DoS Vulnerability Putting DNS Resolvers at Risk

On March 25, 2026, the Internet Systems Consortium (ISC) released patches for three vulnerabilities in BIND 9, the most widely deployed DNS server software in the world. The headline flaw — CVE-2026-1519 — carries a CVSS score of 7.5 and is remotely exploitable with no authentication required. An attacker who controls a maliciously crafted DNS zone can trigger the vulnerability by forcing a BIND resolver to process excessive NSEC3 iterations during DNSSEC validation of an insecure delegation.

DNS Monitoring

You can now monitor DNS records directly from Hyperping. DNS issues are often invisible until your users start complaining. With DNS monitoring, Hyperping checks that your records resolve correctly from multiple locations and alerts you the moment something goes wrong. Head to your monitors dashboard to create a DNS monitor. You can also manage DNS monitors via the API. Questions? Reach out via in-app chat or email us at [email protected].

DNS blocklist monitoring now available to all Oh Dear users

Your domain is on a spam blocklist. Password reset emails aren't arriving, order confirmations land in spam, and customers are complaining that "your site doesn't work." By the time you hear about it, the damage has been building for days. We've shipped DNS blocklist monitoring to catch this early. Oh Dear now checks your domain against 11 major blocklists and notifies you the moment you're listed, with direct links to get removed.

3 Best Tools to Check DNS Records of Domains

DNS records are instructions that tell the internet how to handle your domain. They store details like your website’s IP address, email servers, and security settings. When someone visits your site or sends you an email, DNS records guide the request to the right server. Without correct DNS records, websites can break, and emails can fail. Many tools let you check DNS records, but not all provide clear, reliable results. Some tools show only basic records, while others provide deep insights.

Monitor Load Balanced DNS Records with CIDR Ranges

DNS Check's load balancer monitoring now supports CIDR notation, making it practical to monitor domains served by CDNs and cloud providers that use large IP pools. Instead of listing every possible IP address a provider might return, you can enter CIDR ranges like 104.16.0.0/13 and DNS Check will verify that responses fall within those ranges.

Introducing WHOIS History & Monitoring and Phishing Sentinel: Complete Brand Protection for Your DNS Infrastructure

DNS Spy now offers complete brand protection with WHOIS History & Monitoring and Phishing Sentinel—automatically tracking domain registration changes and detecting phishing variants before they become security incidents.

Domain Health Check: Why It Matters and What It Reveals

Your domain is more than a URL- it’s the control plane for how people (and machines) reach your website, apps, and inbox. When something breaks at the domain layer, the symptoms look “random” (site intermittently down, emails bouncing, logins failing), but the root cause is often predictable: misconfigurations, weak authentication, or degraded DNS performance. A domain health check is the fastest way to surface those issues before customers do.

Best DNS Monitoring Tools in 2026

DNS monitoring is the practice of continuously checking that your domain names resolve correctly (right records, right answers) and that DNS lookups are fast and reliable from multiple locations. Depending on the tool, it can also watch for unexpected DNS record changes (A/AAAA/CNAME/MX/NS/TXT, etc.), validate DNSSEC, and pinpoint where resolution breaks in the chain.