<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Web Security on ShaSec</title><link>https://shasec.my.id/en/categories/web-security/</link><description>Recent content in Web Security on ShaSec</description><generator>Hugo</generator><language>en</language><lastBuildDate>Tue, 11 Aug 2026 20:30:32 +0700</lastBuildDate><atom:link href="https://shasec.my.id/en/categories/web-security/index.xml" rel="self" type="application/rss+xml"/><item><title>Subdomain Takeover and Dangling DNS: Why an Unused Subdomain Can Hijack Your Brand and How UMKM Fix It</title><link>https://shasec.my.id/en/articles/subdomain-takeover-dangling-dns-umkm-guide/</link><pubDate>Mon, 03 Aug 2026 00:00:00 +0000</pubDate><guid>https://shasec.my.id/en/articles/subdomain-takeover-dangling-dns-umkm-guide/</guid><description>You delete the Shopify store but leave shop.yourdomain.id pointing to it. An attacker claims that name and hosts a fake login on your domain. Learn how dangling DNS creates subdomain takeover and the fix you run in one afternoon.</description></item></channel></rss>