3 ms·
Found the blog post referenced by the article: https://chunkhost.com/blog/15%2Fhuge_security_hole_in_sendgrid https://chunkhost.com/blog/15%2Fhuge_security_hol
by Pyxl101 12y ago
Found the blog post referenced by the article:
https://chunkhost.com/blog/15%2Fhuge_security_hole_in_sendgrid https://chunkhost.com/blog/15%2Fhuge_security_hole_in_sendgr...
> However, it turns out that [SendGrid's security] policy was ignored this weekend, and someone managed to convince Sendgrid over the phone to change the email address on the account. We got an email from them, but by that point it was already too late. The hacker had logged into Sendgrid and taken control.
> He had registered a domain, chunkhost.info, and “Would you please change our email from support@chunkhost.com to support@chunkhost.info?” sounded convincing enough that Sendgrid went through with it without bothering to verify anything.