Most companies are unprepared for dns attacks