Rising Complexity and AI-Powered Domain Threats Challenge Cybersecurity Leaders

The cybersecurity landscape is becoming increasingly complex, with domain-based attacks now at the forefront of organizational risk. Recent findings from CSC’s CISO Outlook 2025 report, which surveyed 300 security leaders, underscore a heightened sense of urgency as companies face both traditional and emerging threats. A significant 70% of respondents anticipate an uptick in cyber threats during 2025, while an overwhelming 98% expect risks to rise over the next three years. Domain-related threats—such as cybersquatting, DNS hijacking, and subdomain takeovers—are identified as top concerns for security teams. Experts highlight that DNS and domain infrastructure remain vulnerable, with cybercriminals leveraging off-the-shelf tools and attack kits to exploit exposed systems. The threat landscape is further complicated by the integration of artificial intelligence: nearly 90% of security leaders cite AI-powered domain generation algorithms (DGAs) as a major risk, enabling attackers to create countless fake domains for phishing, fraud, and counterfeiting. These AI-driven campaigns are highly targeted, often focusing on sectors like financial services, and are increasingly convincing due to polished, error-free messaging. Traditional threats such as ransomware, DDoS, and social engineering persist, often converging in hybrid attacks that can cause extensive damage. Despite the growing threat, many organizations still fail to prioritize domain and DNS protection within their core cybersecurity strategy. Only 7% of respondents feel very confident in their company’s ability to mitigate domain attacks, and most rely on a patchwork of in-house solutions and limited outsourcing. There is also widespread concern that domain registrars may not be implementing adequate Know Your Customer (KYC) protocols, increasing the risk of fraud. The rise of AI introduces new internal vulnerabilities, particularly through the unsanctioned use of generative AI tools by employees, potentially leading to data leaks. To address these challenges, experts recommend deploying software agents to monitor AI tool usage, enforcing zero trust frameworks, and streamlining vendor relationships. Budget constraints remain a significant hurdle, with only 7% of organizations reporting a significant increase in cybersecurity funding despite escalating risks. Regulatory pressures, such as the EU’s NIS2 Directive, add further complexity, with only 9% of organizations fully compliant. The article concludes with advice to focus on strategic partnerships and clear accountability to enhance resilience against evolving domain-based threats.