A record not propagating, only mail failing, or a cert won't issue? Triage with dig from the authoritative server down: authoritative vs resolver cache, TTL, negative caching.
137 CVEs, no zero-days. Netlogon and DNS Client RCEs (both CVSS 9.8) lead — compared against ZeroLogon/SIGRed, with patch priority tiers and detection notes for SOC teams.
