FlagThis

MasterCard had a critical DNS error which went unnoticed for five years. A misconfiguration in their DNS records could have allowed attackers to intercept or redirect internet traffic. A security researcher found the error, registered the misconfigured domain (akam.ne) for $300 and fixed it before any abuse could occur. The misconfiguration was on a DNS server that was supposed to end in ‘akam.net’ but instead was configured to use ‘akam.ne’.

The threat actor known as IntelBroker has claimed to have breached Cisco systems, exfiltrating 4.5TB of data including source code and other sensitive information. The breach occurred due to an accidental misconfiguration by Cisco, which left its systems open. This incident highlights the risks of misconfigured systems and the potential for sensitive data exposure. The attackers are now offering this data on various cybercrime forums. It’s important for Cisco to investigate this issue and protect their clients as well as their own data.