You probably have heard about Verisign's recent controversial action. If not, here is one link.
I hope that you also know that the latest version of BIND has been released and it includes the ability to reject undelegated responses from top level domains except for a few that you can explicitly list.
BIND
yeah by the time verisign decides to stop being jerkof........ well lets just say by the time they get rid of the wildcard everyone will have routed around them anyway.
VeriSign to Shut Down Site Finder
But install the new BIND anyway. I'll bet that the new BIND gave Verisign as much to think about as the lawsuits did.