Zakir Durumeric

Congratulations to the pal @adambonica.bsky.social on being named a 2026 Carnegie Fellow. A well-deserved honor for a brilliant political scientist with a real commitment to the public good. news.stanford.edu/stories/2026...

China has started filtering and censoring internet traffic taking place over the QUIC protocol. The filtering started in April last year. The Great Firewall now decrypts QUIC packets at scale and uses a separate blocklist for QUIC traffic, separate from its main filters gfw.report/publications...

🆕 GreyNoise Research: Early Warning Signals Before CVEs Drop In our latest research, we examined dozens of incidents where attacker activity — often in the form of exploit attempts — spiked weeks before a new CVE was disclosed. One chart shows what we found (much more in the report):

ICYMI, yesterday we released a report providing a first look at how we found traces of spyware on two journalists' iPhones, traces which we can attribute with high confidence to Paragon's Graphite spyware:

Academics have discovered a local Great Firewall-like censorship system deployed exclusively in China's Henan region, working independently and about ten times more aggressively than China's main Great Firewall gfw.report/publications...

Enigma will be back as a track at USENIX Security: https://www.usenix.org/conference/usenixsecurity25/enigma-cfp

New paper that analyzes MrDeepFakes, the largest open marketplace for sexual deepfakes (to appear at USENIX Security). The work covers increased consumption, buyer/seller economics, depicted targets, creator motivations, community dynamics, video creation, and use of academic papers/tools.

We're excited to tag ZDNS 2.0-RC1! 🎉 The release is packed with fixes and features. It brings ZDNS into a stable semantically versioned state, breaks apart the CLI and resolver logic, and adds support for IPv6, DNSSEC, DOH, DOT, global CNAME/DNAME following, and logic to try every name servers.

Incredibly excited to see Liz Izhikevich named to the Forbes 30 under 30 today for her work on LEO satellite network performance! www.forbes.com/profile/liz-.... See the cornerstone work here: lizizhikevich.github.io/assets/paper... and lizizhikevich.github.io/assets/paper....

When we first released ZMap, we drafted best practices for minimizing harm when conducting large active Internet measurements. 10 years later, with more experience and shifted norms, we have updated our recommendations for researchers in Section 6 of our recent ZMap retrospective.

Let's Encrypt is now used by more than 500,000,000 websites!!! I could not be more happy and proud of everyone who has played a part in this colossal contribution to online safety, integrity, and confidentiality: