domain names

Free Certificates for IP Addresses: Security Problem or Solution?

Let’s Encrypt is now issuing free certificates for IP addresses, enhancing security by allowing access to websites and home devices without domain names. However, this poses risks; cybercriminals could exploit certificates for malicious sites, deceiving users with fake links that appear secure. The certificates are short-term (valid for six days) to mitigate abuse, highlighting the need for vigilance in users against potential phishing and the necessity of good cybersecurity practices.

https://www.malwarebytes.com/blog/news/2025/07/free-certificates-for-ip-addresses-security-problem-or-solution

MasterCard DNS Error Went Unnoticed for Years

, ,

MasterCard fixed a major domain name server error that allowed potential interception of its Internet traffic due to a typo that went unnoticed for nearly five years. A security researcher, Philippe Caturegli, registered the misspelled domain for $300 to prevent exploitation. Although MasterCard asserted there was no real threat, Caturegli argued that the misconfiguration posed significant risks, potentially enabling Man-in-the-Middle attacks. After notifying MasterCard, he faced backlash for publicly disclosing the error, suggesting a need for better corporate acknowledgment of security vulnerabilities.

https://krebsonsecurity.com/2025/01/mastercard-dns-error-went-unnoticed-for-years/

Over 4,000 Backdoors Hijacked by Registering Expired Domains

,

Over 4,000 backdoors hijacked via expired domains; researchers at WatchTowr Labs sinkholed communication from compromised systems, preventing further malicious use. They identified numerous infected systems, including government and educational institutions in multiple countries. Control of the hijacked domains was transferred to The Shadowserver Foundation for ongoing monitoring.

Over 4,000 backdoors hijacked by registering expired domains

Don’t Let Your Domain Name Become a “sitting Duck”

Over a million domain names, including those from Fortune 100 companies, are vulnerable to cybercriminal takeover due to authentication flaws at major web hosting and registrar firms. These “Sitting Duck” domains can be exploited easily, as attackers can claim control without direct access to the original owner's account. Research indicates that at least 30,000 such domains have been hijacked since 2019, allowing criminals to use them for phishing and spam attacks. Key vulnerabilities stem from misconfigured DNS records and weak verification processes by DNS providers. Security experts urge better practices and coordination among stakeholders to mitigate these risks.

Don’t Let Your Domain Name Become a “Sitting Duck”

Scroll to Top