With increasing adoption of cloud services by organizations, there is unfortunately often an absence of decommissioning checks when such services are no longer in use. It is often up to developers and operations teams to properly clean them up. DNS records pointing to deleted cloud artifacts - not yet purged from name servers - create dangling DNS records. When these artifacts have the potential to be reclaimed by nefarious actors, organizations may become vulnerable to domain hijacking and subdomain takeover attacks.
In this webinar, Dhivya will discuss:
- How DNS hijacks differ from domain hijacks
- Alternatives for identification of expired cloud artifacts
- Attack mechanisms that may be used
- Possible monitoring schemes and tools organizations can implement
- Defensive measures to prevent dangling records and subdomain takeovers