FTC SUES GODADDY FOR YEARS OF POOR HOSTING SECURITY PRACTICES

Summary from the TLDR InfoSec newsletter

The FTC will require GoDaddy to implement basic security protection such as MFA and HTTPS APIs. The complaint takes aim at GoDaddy's security practices, including failures to use MFA, manage software updates, log security events, segment its network, monitor for threats, and implement file integrity monitoring. The FTC notes that these practices have led to several breaches between 2019 and 2022.