UK — The Register

Work to protect DNS from quantum decryption attacks is speeding up

SecurityOctober 26, 20261 min read

Internet groups are speeding up work to make the Domain Name System (DNS) safe from future quantum computers. The same article also covers planned reform of the groups that manage internet number resources.

Racing to protect DNS from quantum computers

John Crain, chief technology officer at ICANN, told The Register that internet governance groups are likely to speed up work. The goal is to keep the DNS secure once quantum computers can easily break today's encryption. Such computers could threaten DNSSEC, the security system that checks whether DNS records are genuine.

Key facts and timing

Crain once thought the DNS would need to be quantum safe in about ten years.
He now says it may be three to five years, and probably not ten.
Moving DNS from single UDP messages to multiple TCP packets will take a few years, he said.
Crain said the group will 'ramp up the speed of development.'

Why this is hard

One way to protect DNSSEC is to use bigger encryption keys. Bigger keys make DNS messages larger, though, and the DNS has message size limits. Larger answers may need several TCP packets instead of one UDP message. Engineers are working on this, but it takes time.

Registry reform

The NRO is the peak body for the five regional internet registries (RIRs): AFRINIC, APNIC, ARIN, LACNIC, and RIPE NCC.
ICP-2 is the document that governs RIRs. It has reached the status of a recommended draft.
The revised ICP-2 defines four stages: recognition, audit, emergency continuity operations, and derecognition.

Why it matters

The DNS helps turn website names into addresses, so it must stay trusted. If quantum computers break its security, attackers could fake DNS records. The article also shows that internet bodies are changing their rules, such as the update to ICP-2 after trouble at AFRINIC, which could give ICANN a bigger oversight role.

Glossary

DNS: The Domain Name System, which turns website names like example.com into internet addresses.
DNSSEC: Extra security added to DNS that helps prove DNS records are real and not faked.
ICANN: The non-profit group that coordinates domain names and parts of the internet's address system.
ICP-2: The policy document that sets the rules for how regional internet registries are formed and run.
TCP: A internet communication method that sends data in order and can use several packets for large messages.

Nomura Research Institute launches service to support proactive system shutdowns during cyberattacks

Nomura Research Institute (NRI) and its subsidiary NRI Secure Technologies began offering "Cyber Resilience Management Support" on October 22, helping companies hit by cyberattacks decide when to proactively halt and resume systems. The service includes setting shutdown and restart criteria and decision-making flows, estimating financial costs and assessing harder-to-quantify risks such as brand damage. Support takes about two to three months at minimum and runs in four stages.

Security전자신문Oct 26

Editorial: Information Security Also Needs an Insurance Safety Net

Following a string of personal data leaks and AI-driven hacking attacks, Korea's cyber insurance market remains very small, at roughly 60–65 billion won a year according to industry estimates. The editorial argues that most companies carry only the legally mandated minimum of 1 billion won in coverage, leaving affected citizens without an adequate safety net, and it calls on businesses to invest in cyber insurance and on policymakers to strengthen compensation systems.

SecurityITmediaOct 26

Good Smile Company Hit by Unauthorized Access; Official EC Site Closed, Member Addresses and Order History Possibly Leaked, No Reopening Date Set

Good Smile Company, a figure maker based in Tokyo, said on October 23 that unauthorized access to its official EC site, "Good Smile Company Official Shop," allowed third parties to view member personal information. The site is closed with no reopening date set. The company says the exposed data may include member names, addresses, phone numbers, email addresses, order details, and the brand and last four digits and expiry date of credit cards, while full card numbers and security codes were not included.