“The misconfiguration persisted for nearly five years until a security researcher spent $300 to register the domain and prevent it from being grabbed by cybercriminals.”
One of Mastercard’s DNS servers pointed at akam.ne instead of akam.net for almost five years. A researcher paid $300 to register it before criminals did. Mastercard said there was no risk. Then it asked him to take down his post.