Storm Watch | Cyber Podcast | Mastercard's 4-Year DNS Nightmare, DHS Axes Cyber Board & New Botnet Wreaks Havoc
Summary: Security researcher Philippe Caturegli found a typo in Mastercard's DNS nameserver records, where "akam.net" was written as "akam.ne", a misconfiguration that went undetected for over four years and affected one in five DNS requests to Mastercard's infrastructure. The same episode covers DHS terminating advisory committees including the Cyber Safety Review Board while it was investigating the Salt Typhoon hacks, and a Mirai variant called the Murdoc Botnet that has compromised over 1,300 IoT devices and uses more than 100 command-and-control servers to exploit AVTECH IP cameras and Huawei HG532 routers.
Bottom line: A single-character typo sat in Mastercard's DNS for four years and touched one in five requests, a reminder that the errors that matter most are often the ones no one is assigned to look for. Meanwhile, the board investigating Salt Typhoon was disbanded mid-investigation, so the findings on telecom compromises of high-profile political figures may never reach the people who set policy.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026