The DNS Threat Landscape December 2025 - Security - Infoblox

The daily rate of discovered Zero-Day detections remained steady, averaging between **3,000 and 10,000 domains per day**, and none of these domains persist longer than **72 hours**. This rapid turnover demonstrates how easily threat actors can replenish and weaponize new infrastructure. For organizations beginning their journey with preemptive DNS security, Zero-Day DNS detections offer an excellent **low-regret blocking opportunity**—they pose minimal risk of business disruption while significantly reducing exposure.