MasterCard DNS Error Went Unnoticed for Years

MasterCard DNS Error Went Unnoticed for Years

The payment card giant MasterCard just fixed a glaring error in its
domain name server settings that could have allowed anyone to
intercept or divert Internet traffic for the company by registering an
unused domain name. The misconfiguration persisted for nearly five
years until a security researcher spent $300 to register the domain
and prevent it from being grabbed by cybercriminals.
...
...
The researcher said he'd hoped that the credit card giant might thank
him, or at least offer to cover the cost of buying the domain.
...
...
"Don't be like Mastercard," Caturegli concluded in his LinkedIn post.
"Don't dismiss risk, and don't let your marketing team handle security
disclosures."

https://krebsonsecurity.com/2025/01/mastercard-dns-error-went-unnoticed-for-years/