Security · 1h ago
Subdomain Takeover Attacks Hit Firefox, Shopify, GitLab
Three major tech organizations—Firefox, Shopify, and GitLab—were vulnerable to subdomain takeover attacks due to misconfigured DNS records pointing to unclaimed resources. Attackers could serve arbitrary content under trusted domains, enabling phishing and cookie theft. The attacks required no technical skill, exploiting a common oversight in DNS management.
Meridian48 take
The recurring pattern shows that even security-conscious organizations neglect DNS hygiene, treating it as a low-risk configuration rather than a critical attack surface.
Read the full reporting
Three breaches, three providers, one misconfigured DNS record →
DEV Community
dns-misconfigurationsubdomain-takeover