Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Mark Flegg
From Forgotten to Exploited: How AI Changes the Dangling DNS Threat
Your organization may know who owns its domains. But does it know where every subdomain points—and whether the resource behind it still exists? A dangling Domain Name System (DNS) record is a threat vector that’s going to become more common unless companies take action. What is dangling DNS? A DNS record can outlive the resource it supports.
Mathematics > Dynamical Systems
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website. Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them. Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Domain Security Report: Are Global 2000 Companies Doing Enough on Domain Security?
We’ve been publishing our Domain Security Report for six years now, and it continues to highlight risks many organizations overlook. In this article, we examine the significant findings from our 2026 report, and shine a light on areas that are easy to overlook in a cybersecurity set-up. This matters because, as reported by CISA, over 90% of successful cyberattacks start with a domain name. What we found DMARC adoption increased to 80% across all Global 2000 companies.
Why DNS Resiliency Is Critical as Outages Surge | eSecurity Planet
Service outages continue to occur, impacting organizations across a variety of industries and maturity levels. And these types of outages are likely to only increase in frequency and scale. When major outages take place, the affected service providers, along with their customers and partners, can suffer from hours of downtime and thousands or even millions in financial losses due to the disruption to operations and customer services.
Addressing the Security Risks of Decentralized Domain Management
When it comes to enterprise cybersecurity management, most teams wouldn’t think twice about incorporating aspects of network security, application security and cloud security into their strategies. However, one critical component continues to be de-prioritized in this kind of corporate planning: domain security. Traditional cybersecurity typically has an internal, top-down process and established roles.
Time to Act as Apple Sets Wheels in Motion for Shorter Certificate Life Cycles
You may have read our previous blog about the pending reduction of digital certificate life cycles to just 90 days. This past weekend, the issue gained momentum at the Certification Authority Browser Forum when more detail was discussed following the proposed ballot to set a timeline for shorter lifetime certificates by Apple®. This creates real urgency for organizations of all sizes to seriously consider and implement automation into their certificate life cycle management.
3 Strategies For a Seamless EU NIS2 Implementation
Be aware of the potential penalties for noncompliance with NIS2 in 2025 and strategies for a more efficient implementation. Mark Flegg, Global Director of Security Services, CSC Businesses everywhere face pressures to enhance their security postures as cyberattacks across sectors rise. Even so, many organizations have been hesitant to invest in cybersecurity for a variety of reasons such as budget constraints and operational issues.
The Dos and Don’ts of DNS Management
The domain name system (DNS) is vital for businesses as it facilitates customer access to online services and resources. Strategic DNS management plays a pivotal role in cybersecurity, safeguarding against threat vectors and ensuring secure global connectivity across online channels including apps, email, websites, application programming interfaces (APIs) and more. For such a vital digital asset, securing and managing DNS effectively is essential.
How You Can Be Hijacked Without Actually Being Hacked
Unsuspecting website visitors are often unaware when they have landed on a spoofed page or are re-directed to malware-hosting web servers designed to steal their sensitive data and information. This attack is known as subdomain hijacking, or subdomain takeover. A web user’s private information is then traded on the dark web, and cybercriminals profit, further fueling the expansion of identity theft in the online world.
Three tips for sharpening up DNS integrity
By Mark Flegg,Joe Uchill,George V. Hulme Andy will explain the origin story of BloodHound, as well as where the project is today and where it's going in the future. Andy will also share his current research surrounding Azure attack paths. Segment Resources: https://github.com/BloodHoundAD/BloodHound https://medium.com/p/82667d17187a
Shorter Certificate Cycles Shouldn't Mean Ignoring Extended Validation
Shorter Certificate Cycles Shouldn't Mean Ignoring Extended Validation In terms of browser buzz, the imminent removal of tracking cookies has dominated the headlines. Chrome, for example, has announced it will remove support for third-party cookies in favor of privacy-preserving application programming interfaces (APIs) which prevent individual tracking while still delivering results for advertisers and publishers.
UK consumers have concerns about personal data in the hands of brands
New research from Gigya found that with only one year left to address data privacy concerns and avoid consumer “opt-out” when GDPR goes into effect in May 2018, brands must take note of the extensive new rights for consumers regarding data protection and control over how their personal data is used. The 2017 State of Consumer Privacy and Trust report surveyed 4,000 adults, half from the UK and half from the US.
Could the GDPR have unintended consequences - such as targeted extortion?
The incoming General Data Protection Regulation (GDPR) has driven media headlines for months. With just over 12 months to go until businesses are required to comply, it's now a top priority agenda item in many boardroom discussions.
Five GDPR issues and the ways in which they can be combated
Cyber-crime is dominating today's headlines and digital criminals are continuing to exploit valuable consumer data for profit. Outraged by the continued growth of data-related crime, governments are looking to tackle the problem with ever more stringent legislative solutions. The most widely reported of these is the EU's General Data Protection Regulation (GDPR).
A Hogwarts For Cyber Protection?
How the UK is minting a new generation of cybersecurity wizards. Never let it be said that the British don't do things with style. In the years leading to World War II, they recognized the need to break enemy codes, and ran crossword puzzle contests to find recruits for their ultra-secret Government Code & Cipher School—also known as GC&CS, or Bletchley Park.
The role of GDPR and cyber-crime
It's time to end the denial over DDoS. This year, Verisign, an internet security firm, witnessed very high intensity flood attacks peaking at approximately 60 Gbps. Even more worryingly, the largest attack at the end of 2016 broke new ground by being the first attack ever to use a Generic Routing Encapsulation (GRE) protocol - a protocol which allows two peers to share data they wouldn't be able to share over the public network itself.
Managing SSL certificates is critical to reducing cybercrime risk
Many IT managers admit they don’t know where all their security keys and certificates are located. Despite a rocky couple of days for online shopping around the elections, with shoppers glued to their TVs rather than engaging in the national online sport costing e-retailers an alleged $800 million, just a week later reports were that online shopping was invigorating holiday sales.
GUEST ANALYSIS SSL certificates and the cyber risk impacting retail - InternetRetailing
If the UK economy is so far shaking off nervousness following the vote for Brexit, it is at least partly down to online shopping. The recent 14-year high in annual retail sales growth reported by the Office of National Statistics (ONS) is supported by average weekly spending online of £1bn in October – up more than a quarter on the same month last year. That spending relies on consumer confidence – and not in terms of the economic outlook.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Mark
Contact Mark, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack