The domain takeover challenge: Detecting and defeating it at scale

Ramesh, Eli F

fwd:cloudsec North America 2026 · Day 1

In an increasingly complex cloud landscape marked by rapid growth, numerous acquisitions, and accelerated development cycles, organizations face significant challenges in managing their digital assets securely. This talk, delivered by Ramesh and Eli F from Block, addresses one such critical challenge: **domain takeovers**. The speakers delve into the intricacies of various domain takeover classes, their potential impact, and, most importantly, the scalable, event-driven system Block built to continuously detect and defeat these vulnerabilities across its vast and dynamic infrastructure.

AI review

Block's war story on scaling domain takeover detection is competent, honest, and operationally useful — the kind of talk a mid-sized security team can actually act on. The architectural detail is real, the attribution problem framing is sharp, and the metrics (1,700 issues detected, 92% closure rate) give it credibility. It's not breaking new ground technically, but it's a well-executed case study that doesn't sanitize the hard parts.

Watch on YouTube