The problem with Squarespace remaining silent with this is that there’s a deafening lack of authoritative information about whether this issue has been patched.

The problem with Squarespace remaining silent with this is that there’s a deafening lack of authoritative information about whether this issue has been patched. The researchers and Krebs are stopping short of making definitive statements because obviously only Squarespace can do that, and they aren’t. I have emailed some former clients I knew to use Google Domains just as a heads up, with steps from the article. It would be nice if Squarespace showed a modicum of ownership for their failings here.