A cleanup script deleted the wrong S3 bucket. An attacker claimed it within minutes and served illegal iGaming content through a corporate subdomain until mitigations were in place.
Slides from my talk about Subdomain Takeover @ #AtlSecCon2026 are up!
www.appcheckwizard.com/talks/2026/a...
appcheckwizard.com
A Tale of Subdomain Takeover | Fortune Tiger: A Tale of Subdomain Takeover - AtlSecCon 2026
A cleanup script gone wrong deleted a critical S3 redirection bucket, allowing an attacker to hijack a corporate subdomain and serve a Fortune Tiger iGaming content to all visitors.