A Tale of Subdomain Takeover | Fortune Tiger: A Tale of Subdomain Takeover - AtlSecCon 2026 A cleanup script gone wrong deleted a critical S3 redirection bucket, allowing an attacker to hijack a corporate subdomain and serve a Fortune Tiger iGaming content to all visitors.

A cleanup script deleted the wrong S3 bucket. An attacker claimed it within minutes and served illegal iGaming content through a corporate subdomain until mitigations were in place.

Slides from my talk about Subdomain Takeover @ #AtlSecCon2026 are up!

www.appcheckwizard.com/talks/2026/a...

Thank you! :)

Best Destinations Find your perfect getaway with Best Destinations.

I don't usually do front-end. But... there are exceptions.

A challenge to build a responsive page from a design mockup - HTML, pure CSS and vanilla JavaScript. No Bootstrap, no Tailwind.

It went through a full cycle: build, test, refactor.

Feedback welcome.

Repo: github.com/alexandersch...

QA is fun!

Github pages