GoDaddy was ordered to strengthen security measures

Industry Information 28 Jan 2025 01:33:34 PM By:DN platform editor
Abstract:

Recently, web hosting giant GoDaddy was ordered by the US Federal Trade Commission (FTC) to rectify security vulnerabilities and strengthen security measures.

Recently, web hosting giant GoDaddy was ordered by the US Federal Trade Commission (FTC) to rectify security vulnerabilities and strengthen security measures.

The FTC pointed out that since 2018, GoDaddy has failed to implement reasonable and appropriate security measures to protect and monitor its website hosting environment. The company has many problems, such as not properly managing assets and software updates, not assessing the risks of shared hosting services, not adequately recording and monitoring security-related events, and not isolating shared hosting from unsafe environments.

GoDaddy was ordered to strengthen security measures

Its loose patch system is implemented by each product team independently and lacks centralized management, resulting in serious vulnerabilities in a large number of boxes in the shared hosting environment, allowing hackers to steal user credentials and credit card information within months.

In addition, its customized Internet-facing API has security risks, is open to the Internet and unprotected, uses plaintext credentials and has no multi-factor authentication, which also gives hackers an opportunity to take advantage. Between 2019 and 2022, these security flaws caused multiple security vulnerabilities, and hackers gained unauthorized access to customer websites and data.

Although GoDaddy claims on its website, social media and emails that it has deployed reasonable security measures and complies with the relevant Privacy Shield framework, the FTC believes this is misleading.

However, in the settlement agreement, GoDaddy neither admitted nor denied wrongdoing, and no fines were attached. But it agreed to establish a comprehensive information security program, including creating a centralized inventory and management system for hardware, software and firmware, using automated tools to analyze events in real time and retain system audit logs, and launching multi-factor authentication methods for employees. It is also necessary to hire an independent third party to review its security plan every two years and no longer make false statements about security measures.

The FTC emphasized that many companies rely on web hosts like GoDaddy to ensure the security of their websites, and this action is intended to encourage them to strengthen their security systems and protect consumers around the world. GoDaddy said it has implemented some of the requirements and plans to continue investing in defensive measures to ensure the security of customers, websites and data.

Information source: domainincite

The big boss who once acquired chat.com for $15.5 million has made another move! He spent $150,000 to acquire os.ai

The big boss who once acquired chat.com for $15.5 million has made another move! He spent $150,000 to acquire os.ai

Yesterday, the famous domain name investor Dharmesh announced that he had successfully acquired os.ai for US$150,000. This move once again aroused widespread attention in the industry to high-quality domain name transactions.

Industry Information 13 Mar 2025 03:03:28 PM

GX.com sold for $1.2 million, setting a new record for the value of two-letter .com domain names

GX.com sold for $1.2 million, setting a new record for the value of two-letter .com domain names

Recently, the two-letter domain name GX.com was successfully traded for a high price of US$1.2 million, further consolidating the scarcity and high value of two-letter .com domain names in the domain name market.

Industry Information 13 Mar 2025 03:03:31 PM

ICANN plans to phase out .su domain name in 2030

ICANN plans to phase out .su domain name in 2030

ICANN announced that it will stop using the Soviet-era .su country code top-level domain (ccTLD) in 2030. The domain has been in use since 1990 and currently has about 100,000 registered domain names.

Industry Information 12 Mar 2025 02:37:04 PM

ICANN Board Geographic Restrictions Take Effect, North American Candidates Denied Nomination

ICANN Board Geographic Restrictions Take Effect, North American Candidates Denied Nomination

At ICANN 82, the ICANN Nominating Committee (NomCom) confirmed that applications from candidates in the North American region had been politely rejected due to geographic restrictions.

Industry Information 11 Mar 2025 04:15:21 PM

Double.com successfully sold for $980,000

Double.com successfully sold for $980,000

Recently, Mark Ghoriafi once again facilitated an important domain name transaction - successfully selling Double.com for a high price of US$980,000.

Industry Information 11 Mar 2025 10:24:45 AM

The attempt to register the MIT.school domain name failed, and the

The attempt to register the MIT.school domain name failed, and the "pseudo-protection" behavior was rejected

In the field of domain name investment and use, the UDRP case involving the MIT.school domain name is a typical example with great warning significance.

Industry Information 10 Mar 2025 03:22:33 PM

GoDaddy was ordered to strengthen security measures