WILMINGTON, DE — CSC has received a 2026 cybersecurity innovation award for technology designed to detect vulnerabilities in corporate domain name systems, as businesses face risks from abandoned DNS records that can allow attackers to take control of legitimate web addresses.
The Wilmington-based company received the Most Innovative DNS Security distinction in Cyber Defense Magazine’s 2026 Top InfoSec Innovator Awards for its Subdomain Monitoring technology.
The recognition follows CSC’s analysis of nearly 500,000 DNS records, which identified corporate exposure to subdomain takeover vulnerabilities associated with dangling DNS records.
These vulnerabilities can arise when a company’s DNS configuration continues pointing to an external service or resource that is no longer active or controlled by the organization.
Attackers may exploit such records to gain control of a subdomain associated with an otherwise legitimate corporate website, potentially allowing them to impersonate trusted online services.
CSC developed Subdomain Monitoring to help corporate security teams identify these exposures, track changes to DNS configurations and remove records that are no longer needed.
The technology operates through CSC’s DomainSec threat intelligence platform, which monitors domain-related security risks across enterprise portfolios.
When the system detects changes to DNS zone records, it alerts administrators and security engineers while providing information intended to help them evaluate the associated risks.
The monitoring capability allows organizations to identify outdated configurations, review potential attack paths and take corrective action before vulnerable subdomains are exploited.
It also integrates with DomainSec’s broader security capabilities, including enforcement and takedown measures targeting domain-related threats.
The product addresses an operational challenge for companies managing extensive collections of websites, applications and third-party services.
As organizations add and retire digital services, DNS records can remain in place after the underlying resources have been removed. Maintaining accurate records across large corporate environments requires ongoing oversight.
CSC contends that the growing use of artificial intelligence by attackers is increasing the urgency of detecting and correcting these weaknesses.
“With the rise of AI, attackers exploit dangling DNS records at an unprecedented scale,” Mark Flegg, CSC’s senior director of technology for Security Services, stated.
“For enterprises, this means the window between a subdomain becoming vulnerable and being hijacked is shrinking significantly,” Flegg added.
CSC provides enterprise domain registration, brand protection and cybersecurity services focused on threats involving domains, fraud and DNS infrastructure.
Its Subdomain Monitoring product is intended to reduce the administrative burden of maintaining DNS records while providing security teams with earlier visibility into configurations that could expose corporate systems to unauthorized control.
The Cyber Defense Magazine award recognizes the company’s approach to identifying and managing subdomain hijacking risks, an area of cybersecurity tied to the maintenance of corporate internet infrastructure.
Support the local news that supports Chester County. MyChesCo delivers reliable, fact-based reporting and essential community resources—free for everyone. If you value that, click here to become a patron today.