[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2P1Yo6-CZOUxGuVsQFcqYtsVald6pMsMMmNMYMX08us":3},{"article":4,"iocs":51,"watch_terms":69,"solutions":70,"lesson":159},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"96808df9-a37a-444d-9b07-2bc49cb5339e","ISC Patches 14 Vulnerabilities in BIND 9 Security Update","isc-patches-14-vulnerabilities-in-bind-9-security-update-5ce654","Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process. The post ISC Patches 14 Vulnerabilities in BIND 9 Security Update appeared first on SecurityWeek.","Internet Systems Consortium (ISC) has released security updates for BIND, addressing 14 vulnerabilities. Seven of these are high-severity flaws that could lead to denial-of-service conditions through unexpected program exits, memory exhaustion, or termination of the named process. One critical vulnerability, CVE-2026-77692, can be exploited remotely with a single crafted DNS-over-HTTPS request.","ISC releases BIND 9 security update patching 14 vulnerabilities, 7 critical, causing DoS.","https:\u002F\u002Fwww.securityweek.com\u002Fisc-patches-14-vulnerabilities-in-bind-9-security-update\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F02\u002FDNS.jpeg","2026-09-17T12:39:28+00:00","2026-09-17T14:00:22.378564+00:00",8,[17,20,23,26],{"name":18,"type":19},"BIND 9","product",{"name":21,"type":22},"ISC","vendor",{"name":24,"type":25},"DNS","technology",{"name":27,"type":25},"DNS-over-HTTPS","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,39,41,46],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":40},{"id":28,"icon":30,"name":31,"slug":32},{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[52,56,58,60,62,65,67],{"type":53,"value":54,"context":55},"cve","CVE-2026-80274","High-severity vulnerability in BIND 9",{"type":53,"value":57,"context":55},"CVE-2026-76163",{"type":53,"value":59,"context":55},"CVE-2026-19666",{"type":53,"value":61,"context":55},"CVE-2026-81563",{"type":53,"value":63,"context":64},"CVE-2026-77692","High-severity vulnerability in BIND 9, exploitable via DoH",{"type":53,"value":66,"context":55},"CVE-2026-19667",{"type":53,"value":68,"context":55},"CVE-2026-81736",[21,18],{"controls":71,"vendors":158},[72,101,130],{"slug":73,"name":74,"problem":75,"products":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[77,85,93],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":102,"name":103,"problem":104,"products":105},"patch-management","Automated patch management","Known holes get closed in days, not months.",[106,114,122],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":50,"name":131,"problem":132,"products":133},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[134,142,150],{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":151,"vendor_name":152,"vendor_logo":153,"product_slug":154,"product_name":155,"url":156,"description":157},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",[],{"slug":160,"title":161,"body":162,"framework_refs":163,"framework_notes":174},"critical-bind-9-flaws-expose-dns-infrastructure-to-remote-dos-attacks","Critical BIND 9 Flaws Expose DNS Infrastructure to Remote DoS Attacks","ISC's release of patches for 14 BIND 9 vulnerabilities — including one critical flaw exploitable with a single crafted DNS-over-HTTPS request — highlights the persistent risk posed by unpatched DNS infrastructure. BIND is one of the most widely deployed DNS server implementations in the world, making these flaws a high-priority concern for internet-facing environments. The high-severity denial-of-service vulnerabilities can cause memory exhaustion or process termination, potentially disrupting name resolution for entire networks or services. Delayed patching of critical infrastructure components like DNS servers leaves organizations exposed to both opportunistic and targeted attacks. Because DNS is foundational to nearly all network operations, even brief outages can cascade into significant service disruptions and business impact.",[164,165,166,167,168,169,170,171,172,173],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST SI-3: Malicious Code Protection","NIST SC-20: Secure Name\u002FAddress Resolution Service","NIST SC-22: Architecture and Provisioning for Name\u002FAddress Resolution Service","ITIL Change Management: Emergency Change Procedures","ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities",{"NIST SI-2: Flaw Remediation":175,"CIS Control 13: Network Monitoring and Defense":176,"CIS Control 12: Network Infrastructure Management":177,"CIS Control 7: Continuous Vulnerability Management":178,"NIST SC-20: Secure Name\u002FAddress Resolution Service":179,"ITIL Change Management: Emergency Change Procedures":180,"ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities":181,"NIST SP 800-40 Rev 4: Guide to Enterprise Patch Management Planning":182,"NIST SC-22: Architecture and Provisioning for Name\u002FAddress Resolution Service":183},"Flaw remediation requires installing ISC's BIND fixes promptly to close the denial-of-service vulnerabilities in internet-facing DNS servers.","Monitoring DNS traffic and service health helps detect crafted DoH requests and memory exhaustion attacks against BIND before resolution fails.","Treating DNS servers as managed network infrastructure, kept current and securely configured, reduces exposure of internet-facing BIND instances to the crash flaws.","Tracking ISC advisories and patching BIND promptly removes the 14 flaws, including the critical DNS-over-HTTPS one, before attackers can use them.","Secure name resolution services must stay available and trustworthy, which unpatched BIND flaws threaten by letting one request crash the server.","Emergency change procedures let teams roll out critical BIND patches quickly while still testing that DNS keeps working.","Managing technical vulnerabilities means assessing BIND exposure as soon as ISC publishes fixes and patching in good time.","Patch management planning helps organisations prioritise critical infrastructure such as BIND and deploy fixes quickly rather than leaving DNS servers exposed.","Redundant, separated DNS servers, with internal and external roles split, keep name resolution working if one BIND instance is crashed by these flaws."]