Security2 hOctober 12, 2026, 20:30

Two UDRP rulings expose weak registrar account security

The domains shridharmasthala.org and indiraivf.com were stolen from registrar accounts without owners' knowledge, with logins traced to Sweden, Switzerland and Japan and no 2FA enabled. Both domains were recovered via UDRP, but the rulings do not say who is responsible for securing the account controlling a domain.

MediaNama

Open source

Two UDRP rulings expose weak registrar account security

shridharmasthala.org was stolen on June 10, 2026 and returned by a September 14 ruling
Account logins came from Sweden, Switzerland and, after the transfer, Japan
Two-factor authentication was not activated and the email appeared in breach data
indiraivf.com was taken on October 31, 2024 and noticed only in January 2025

#UDRP#Hostinger

Two groups account for a third of UK ransomware attacks

Security

Nikkei discloses two cyberattacks targeting employee email accounts

Policy

EU may loosen EV rules for the third time in two years

Policy

Two UDRP rulings expose weak registrar account security

Two groups account for a third of UK ransomware attacks

Nikkei discloses two cyberattacks targeting employee email accounts

EU may loosen EV rules for the third time in two years

Two US Site-Blocking Bills Compete Over VPN Rules and ISP Liability