Survey of 254 Russian Domains Shows 89% DMARC Adoption but Highlights Gaps in Reporting and Subdomain Policies
A detailed DNS sweep of 254 Russian domains across retail, IT, industry, finance, media, government, telecom and other sectors has revealed high adoption rates for core email authentication records, yet also exposed practical limitations in how those records are configured.
The scan, performed on 28 September 2026, queried MX, SPF, DMARC and 14 common DKIM selectors. It found MX records at 96.1% of domains, SPF at 93.7%, DMARC at 89.0% and DKIM via typical selectors at 62.2%. Two domains returned SERVFAIL for all queries and were counted as having no records.
Among the 226 domains that published DMARC, policies broke down as 40.7% reject, 42.9% quarantine and 16.4% none. Thirty-three of the 43 domains without an rua aggregate reporting address still requested reject or quarantine treatment from receivers.
The researchers noted that 27 domains combined a strict parent-domain policy (reject or quarantine) with sp=none for subdomains, while a small number used pct values below 100. They stressed that DNS records alone cannot verify alignment between SPF or DKIM and the visible From header, nor confirm whether reports are actually received and acted upon.
Sector-level figures showed full SPF and DMARC coverage in the IT and finance samples, though the authors cautioned that the non-representative selection and small group sizes prevent direct comparisons of security maturity.
The study concludes that owners should first confirm whether a domain sends mail at all, review full SPF chains including redirects, test real messages for alignment, examine subdomain inheritance, and validate that rua addresses actually deliver usable reports before tightening policy.
Related articles
Server Outage Halts Vehicle Registration Across Smolensk Region
A technical failure on a unified server has temporarily suspended vehicle registration services in the Smolensk region of Russia. The outage affects the interdistrict traffic police department No.1 located on Lavochkina street, preventing new registrations from being processed. Regional UMVD officials confirmed that the problem impacts the single server used for the entire oblast's registration system. According to department head Maxim Zykov, the disruption is considered temporary, though no precise restoration timeline was provided. Applicants who submitted requests through the Gosuslugi portal will receive services in the first working days after the system is restored. The UMVD plans to issue an additional announcement once operations resume.
Pivoting in Legacy Hell: Navigating MIPS Servers, BusyBox, and 2014 Kernels During Internal Network Assessments
The article details a complete methodology for pivoting from an initial SSH compromise on an old Debian MIPS server to reach a hidden web admin panel inside a segmented network. It covers environment enumeration with commands like uname -a and ip route, followed by setting up a Chisel-based SOCKS5 proxy when standard SSH dynamic forwarding is disabled by server configuration. Scanning proceeds via proxychains with nmap using -sT, -Pn, and -n flags or by deploying static MIPS binaries directly on the host. Traffic is then routed through Burp Suite chained to the SOCKS proxy for password guessing against the web interface. The piece emphasizes practical constraints such as BusyBox limitations, kernel version incompatibilities with modern binaries, and the need for careful subnet identification. Readers are directed to replicate the full chain in the Forgotten Server task from the free White Hacker Profession course.
Neuromorphic Processors Deliver Reflex-Like Responses for Robots, Drones and Edge Sensors
Neuromorphic chips are optimized for sparse, event-driven data rather than dense matrix operations, making them ideal for always-on peripheral devices that must react instantly while conserving power. The technology pairs naturally with event cameras and temporal sensors in robotics, drones, automotive systems, medical wearables, industrial monitoring and space applications. Platforms such as Intel Loihi 2, BrainChip Akida, SynSense Speck and SpiNNaker2 already demonstrate working prototypes that activate only on meaningful changes in the input stream. Researchers at TU Delft have flown autonomous drones using spiking networks on Loihi, while NASA has tested radiation-tolerant neuromorphic designs for onboard decision making. The approach complements rather than replaces GPUs and NPUs, creating hybrid systems where the neuromorphic layer handles fast reflexes and conventional accelerators manage complex models.
K2 Cloud Adds Native OVN Traffic Mirroring for NTA/NDR Deployment in Public Cloud
K2 Cloud has implemented traffic mirroring for virtual machine interfaces inside overlay networks built on OVN, solving a long-standing gap that prevented NTA/NDR systems from operating in Russian public clouds. The company contributed the feature upstream, and the patch was accepted into the main OVN codebase. The solution supports source, destination, and mirroring session objects together with optional match/action filters that eliminate duplicate packets, reduce load on sensors, and allow traffic distribution across multiple analyzers. Testing with Positive Technologies PT NAD showed sustained throughput above 3 Gbit/s with approximately 400 000 packets per second and minimal packet loss. The feature works inside a single availability zone; multi-AZ deployments require one PT NAD sensor per zone. Management is available through the web console, an EC2-compatible API, and the official Terraform provider.