Blog Post

Microsoft Defender External Attack Surface Management Blog
3 MIN READ

Identify Digital Assets Vulnerable to Subdomain Takeover

ajaykallur's avatar
ajaykallur
Icon for Microsoft rankMicrosoft
Jan 03, 2023
Subdomain takeover vulnerabilities are, in most cases, the result of an organization using an external service and letting it expire. However, that expired subdomain is still a part of the organizati...
Updated Jan 03, 2023
Version 1.0
best practices
Product Highlights
ajaykallur's avatar
ajaykallur
Icon for Microsoft rankMicrosoft
Apr 19, 2023

Hi, prakassec, it's possible that someone can take a subdomain that is no longer in use or expired and register it and then exploit any pre-existing data connections still pointing to the expired subdomain.