Re: Let's clear it up...
I think the Cisco blog article related to this discussion is here (dated 11th Feb 2014) <http://blogs.cisco.com/security/dynamic-detection-of-malicious-ddns/>. At the time of reading, there are two comments shown - one from No-IP referencing a blog article of their own in response, and inviting contact, and the other from Cisco saying they'll be in touch.
So No-IP were certainly aware of Cisco's figures and concerns. But we don't know what they were doing about them.
How long would it take to manually delete sub-domains from a list of (say) 20,000?