DHS issues “emergency directive” to all federal agencies to audit DNS security for website domains. Agency must update their passwords for all accounts on systems that can be used to tamper DNS records. DHS must also monitor certificate transparency logs for any unauthorized changes to their domains. Agencies, except the Department of Defense, the Central Intelligence Agency (CIA) and the Office of the Director of National Intelligence, have 10 days to implement the directives. DNS hijacking involves changing DNS settings of a domain, redirecting victims to an entirely different attacker-controlled server.
Source: https://thehackernews.com/2019/01/dns-hijacking-cyber-attacks.html

