BIND

CISA Adds Five Actively Exploited Vulnerabilities in Apache Struts, BIND, ProFTPD, Strapi and ONLYOFFICE Docs to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on October 8, 2026, confirming active exploitation in the wild. The affected products include Apache Struts, BIND, ProFTPD, Strapi, and ONLYOFFICE Docs, with CVEs issued between 2015 and 2023. Federal agencies have until October 11, 2026, to apply mitigations or remove affected systems. One highlighted issue, Strapi CVE-2023-22894, stems from plaintext storage of sensitive information, allowing authenticated attackers to extract user data via query filters. When combined with CVE-2023-22621, the flaws enable remote code execution. CISA also warned that some impacted products may no longer receive vendor support.

Internal DNS as Control Plane: Why Resolvers Matter More Than They Seem

Cloudflare has announced the general availability of Cloudflare Internal DNS for corporate clients of Cloudflare Gateway. The service combines public and internal DNS with a protective resolver, structured around three core objects: internal zones, views, and resolver policies. The article explains how typical hybrid infrastructures suffer from fragmented DNS layers that lead to resolution failures often misdiagnosed as balancer or VPN issues. It emphasizes that DNS serves as an early control point in zero-trust environments because it decides whether a service exists and which address is returned before any connection is established. The model separates data plane from management plane, requiring unified change channels, auditing, and observability to remain effective. Practical recommendations include avoiding manual edits across servers, using infrastructure-as-code for consistency, and integrating with systems such as NetBox for desired-state management.