Global 2000 companies face domain security risks, report finds

Many of the world's largest companies remain exposed to domain-based cyber risks, despite gradual improvements, as attackers increasingly exploit weaknesses outside the traditional corporate firewall, Silicon Angle reports.

A new report from Corporation Service Co. (CSC) reveals that 67% of Global 2000 companies have implemented fewer than half of recommended domain security measures. Compromised domains are routinely used for attacks like business email compromise and malware delivery. While adoption of DMARC has risen to nearly 80% among Global 2000 companies, driven partly by regulations like the EU's NIS2 directive, other defenses lag. Only about 11% of Global 2000 companies deploy DNS security extensions, and registry lock adoption remains below 25%, despite being a strong defense against domain hijacking. Tech unicorns show stronger adoption of DNS controls but nearly 90% rely on single cloud infrastructure with only 1% using DNS redundancy.

The report highlights the critical role of enterprise-class registrars, warning that reliance on consumer-grade options can lead to domain hijacking and impersonation. The findings suggest that while companies are slowly increasing domain security, more work is needed, especially among the largest global corporations. Regulatory interventions like NIS2 are expected to accelerate these changes as cyberattacks against multinational companies continue to grow.

Source: Silicon Angle