Nearly Three-Quarters of Firms Suffer Downtime from DNS Attacks

Hybrid performing and cloud migration in the course of the training course of the pandemic has led to a surge in DNS-linked assaults, with software downtime and information theft a significant consequence, in accordance to IDC.

The analyst’s 2022 International DNS Danger Report is sponsored by security seller efficientIP and compiled from interviews with over 1000 global businesses with extra than 500 workforce.

The report disclosed that 88% of businesses endured DNS-similar assaults about the previous calendar year, at an typical of 7 for every responding organization.

These incorporate DNS tunnelling, phishing, malware, zero-working day exploits, DDoS attacks, DNS hijacking and cloud misconfiguration abuse. All groups saw an improve in frequency of attacks in excess of the past yr.

The DNS layer is usually ignored by IT teams mainly because firewalls are set to allowlist visitors. On the other hand, its in close proximity to ubiquity in contemporary IT environments and insecure structure make it a common vector for attack. In truth, almost all cyber-attacks use DNS at some place in their lifecycle, in accordance to the NCSC.

The threats involved with DNS have only grown for the duration of the pandemic, IDC argued.

“Hybrid do the job types have developed new worries for IT groups. With the disappearance of the perimeter, the two attack surface and cloud usage have enhanced noticeably,” it noted.

“Survey effects exhibit that the variety and dimension of attacks remain pretty substantial, and cyber-criminals are making use of all available equipment to achieve entry to networks, disrupt operations, and steal info by leveraging vulnerabilities and cloud misconfigurations.”

Some 70% of respondents explained they endured application downtime as a consequence of DNS attacks – both related to in-house and cloud-centered apps. A quarter (24%) experienced shopper information or delicate IP stolen.

This contributed to average costs of $942,000 for each attack, the report claimed. This is almost unchanged from the $950,000 cited in final year’s report.

Some parts of this article are sourced from:
www.infosecurity-magazine.com