Microsoft Buys Corp.com So Bad Guys Can’t
Summary: Microsoft agreed to buy the corp.com domain from Wisconsin native Mike O'Connor, who bought it 26 years ago and had been auctioning it with a starting price of $1.7 million. Years of testing, some subsidized by U.S. Department of Homeland Security grants, showed hundreds of thousands of Windows PCs were constantly trying to send passwords, email and other sensitive data to corp.com because early Windows versions defaulted Active Directory paths to "corp."
Key Takeaway: Whoever controlled corp.com could passively intercept private communications from hundreds of thousands of company laptops taken outside the corporate network, and experts say hardly any vulnerable organizations deployed Microsoft's fixes because doing so requires taking down the entire Active Directory network and likely breaks or slows day-to-day applications.
Read the original at Krebs on Security ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026