Collaborate Disseminate
Microsoft has fixed a flaw in Teams that could have allowed attackers to launch a wormlike attack on multiple accounts by sending one victim a malicious GIF image. Continue reading ‘Evil GIF’ account takeover flaw patched in Teams
Researchers have found it’s still child’s play to hijack subdomains from companies such as Microsoft to use in phishing and malware attacks. Continue reading Researcher finds 670 Microsoft subdomains vulnerable to takeover
Poor DNS housekeeping opens the door to account takeover. Continue reading PoC Exploit Compromises Microsoft Live Accounts via Subdomain Hijacking
With the release of Chrome 69, Google opted to hide the www and m subdomains from the address bar, claiming that they’re not used anymore and therefore don’t need to be displayed in the address bar.
Is the www subdomain really as trivial as Googl… Continue reading Analyzing Impact of WWW Subdomain on Cookie Security
NameCheap has said it intends to notify customers of a misconfiguration issue that allowed customers to create subdomains for any hosted account. Richard Kirkendall, CEO for the ICANN-accredited registrar, said on Twitter that the company is currently … Continue reading NameCheap to Notify Customers of Misconfiguration Issue that Allowed Subdomain Creation on Any Hosted Account