
Infoblox does not sell this as a problem its products alone solve. Burton described it as a lifecycle management issue rather than a product gap. Her recommendation centers on process. Organizations need policies that require decommissioned cloud services to be reported and their DNS records removed, along with regular audits of DNS zones to catch orphaned records before an attacker finds them.
Traffic distribution systems remain the dominant threat vector
Traffic distribution systems, or TDS, affected 96% of Infoblox customers at peak reach in the report, the highest of any threat category measured. A TDS profiles a visitor by device type, location, browser and behavior, then decides in real time whether to deliver a scam, malware or a benign page.
A researcher or automated scanner visiting the same link as a targeted victim may see a harmless decoy, while the intended target is routed to the actual payload. “The way I think about them is that they’re really bulletproof routing systems,” Burton said.



















