New DNS vulnerability allows 'nation-state level spying' on companies