TheStack.Technology shared an eye-opening article about security researchers discovering a method to gain control over any .ai domain name.



Fortunately, they informed the appropriate parties of their findings, and steps were taken to rectify the issue. However, the report remains compelling.

According to the piece, while probing domain registries for vulnerabilities, a team of security researchers led by Sam Curry, Brett Buerhaus, Rhys Elsmore, and Shubham Shah were able to acquire "complete control over any .ai domain." They went on to state that they had the capability to manipulate the DNS zones of 19 other TLDs, such as the commonly used .ly domain employed by a domain shortener with more than five million monthly users.

Notably, the .ai TLD is heavily utilized by AI startups, with over 170,000 registered users. The researchers could have disrupted their operations outright, or exploited this newfound power in many different unsavory ways.