David Brunsdon

David Brunsdon is a Threat Researcherat Infoblox, specializing in uncovering malicious activity through DNS—the glue that holds the Internet together. By following the trails DNS creates, he uncovers a fascinating array of nefarious activity. Before transitioning to cybersecurity, David worked in operational technology, a background that gives him a unique perspective on networks and a deep appreciation for digging through logs. With a focus on threat hunting and domain hijacking, David tracks how cyber attackers exploit DNS infrastructure across multiple stages of their campaigns. His recent work has exposed subdomain compromises affecting major organizations.

2025 Talk

Talk Title: Unwanted Guests

Talk Abstract:
In this talk, David will demonstrate how threat actors abuse compromised or misconfigured infrastructure at various stages of the attack chain. Whether it's launching attacks from equipment installed at homes or offices, or hijacking domains, or compromising websites sites so they host malware stages and redirect site visitors to malicious content, threat actors seem to have little need to host their own infrastructure.