News for hackers. Stuff that matters.
Re:Scammers are abusing an internal Microsoft account to sen... by 10000truths on Sunday May 24, 2026 @12:01AM (#48254262)
> In fact, it’s unlikely such a list is even _allowed_ to exist given the sensitive nature of some areas of the business, being a publicly traded company which works directly with regulated entities and governments.

If the existence of a domain/subdomain is considered sensitive information, then something has gone very wrong.

Re:Scammers are abusing an internal Microsoft account to sen... by antiframe on Sunday May 24, 2026 @01:30AM (#48254691)
Companies do register domains before launching products and don't want to leak them. Now, I still support Microsoft and other companies to list the domains they send official emails from.
Re:Scammers are abusing an internal Microsoft account to sen... by seb1204 on Sunday May 24, 2026 @01:50AM (#48254769)
Why would that not be possible? You can still do that and then once the rabbit is out add it to the main list. Come on, don't let the good be the enemy of the perfect. I'm sure there are several ways to find and list all domains. What bothers me more is that they allowed to have different domains in the first place. Why not sub domains to make it clear.
Re:Scammers are abusing an internal Microsoft account to sen... by antiframe on Sunday May 24, 2026 @01:22PM (#48259194)
That's what I said? Companies can hide domains while they are under development but then they should still maintain a list that they send emails from. I was opposed to legislation that required all registered domains regardless of use being published.