DNS was designed in the s without security in mind. Several attacks exploit this:
DNS Spoofing: An attacker sends fake DNS responses. Your computer trusts the first answer it receives.
DNS Cache Poisoning: An attacker inserts false records into a resolver's cache. Everyone using that resolver gets wrong answers.
DNS Amplification: Attackers use DNS servers to amplify DDoS attacks. Small queries produce large responses.