Date: October 21, 2026 This post covers three recent security issues that affect widely used web technologies. These are important to address, but they are also manageable. Our development and operations teams are actively working right now to patch and update all customer instances across our networks. Most customers will not need to take any action ... View Post
Our latest blog posts
Can You Warn Customers When Your Website and Email Are Both Down?
Your website is down, and customers are calling. Then, as the support team drafts an email explaining the outage, you realize they can't send it because your company’s email is affected too. Now support has two jobs: Finding out what happened. Finding a way to tell people. Meanwhile, customers keep retrying failed logins and opening tickets. An ... View Post
You Bought the Company. Did You Get Control of Its Domains?
The acquisition has closed. The website is still running, and somebody has sent your IT team a spreadsheet of passwords. Before you mark the domain handover complete, try one more thing: Administer it without calling the seller: Can your team sign in with its own authentication methods? Receive a recovery message? Authorize a critical change? A ... View Post
Your DAO Uses Multisig. Why Can One Person Change Its Domain?
Suppose your DAO requires three of five signers to move treasury funds. Nobody gets to send the money somewhere new because they happened to be the first person awake. Now look at the domain. Can one contributor log-in to the registrar and change its nameservers? Can another edit DNS records with an API token? If so, you have approval rules for the treasury and ... View Post
Auto-Renew Is a Setting. Domain Continuity Is a Plan.
“It’s on auto-renew.” That’s a good answer, sure. It means somebody checked a box. The thing is that domain renewals can fail. So, what happens if it does...? Here’s a likely scenario. Suppose the company card is replaced after a fraud alert. The old card remains on the registrar account. Then, when the renewal charge fails, the warning goes to whoever ... View Post
Your Domain Has MFA. What Happens When Someone Calls Support?
Your team uses hardware security keys and the registrar account has a strong, unique password. So, you’ve done the sensible things. Now somebody contacts support and says they’ve lost their key. What happens next? If you don’t know, there is a part of your domain security you haven’t checked. It’s multi-factor authentication (MFA). MFA governs the normal ... View Post






