The researchers found that weak security Defaults Enabled Squarespace Domains Hijacks.
SOURCES
Mastodon4
Bluesky1
News1
- Jul 15did:plc:s4xmseub4a4pwwetg2xxmcyyResearchers: Weak Security Defaults Enabled Squarespace Domains Hijacks Discussion
- @technotenshi@infosec.exchangeFrom @briankrebs, Researchers found that weak security defaults in Squarespace allowed hijackers to take over domains by exploiting email login options. This mainly impacted crypto businesses, redirecting their sites to phishing pages. Squarespace has now removed the email login feature. #CyberSecurity#Infosec#DomainSecurity
- @jrimer2023@tweesecake.socialKrebs on security Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks
- @linguo@mastodon.socialResearchers: Weak Security Defaults Enabled Squarespace Domains Hijacks
- @feeds@cysec.socialResearchers: Weak Security Defaults Enabled Squarespace Domains Hijacks #cybersecurity#krebs#cysec