How the Consumer Product Safety Commission is (Inadvertently) Behind the Internet’s Largest DDoS Attacks

This post details how the CPSC.gov DNS record is being exploited for DNS amplification attacks, contributing to large DDoS attacks. It explains the mechanism of DNS reflection and highlights the specific vulnerability of the CPSC.gov record due to its large response size. The post also offers recommendations for optimizing DNS records to mitigate such attacks, showcasing Cloudflare's role in analyzing and addressing security threats related to DNS infrastructure.