News Summary

• Researchers at a stealth startup in Israel scanned 6,214 live domains belonging to defense contractors, Fortune 500, and Big Tech companies.
• 120 of them, each on a different site, pointed to one or more code packages or domain names that weren’t registered.
• “The trust model is broken,” Alon Hertz, one of the researchers, wrote in an interview.
• The danger comes later, when the package or domain it points to is abandoned and someone else claims it.