#subdomain-takeover

Analysis · May 3, 2026 · Colten Anderson

Spirit Airlines is dead. Its attack surface isn't.

The security story isn't that an airline went bankrupt. It's what happens to 132 APIs, years of customer PII, and a cloud footprint when a company dies overnight and nobody is left to decommission it.