ALO ALTO, Calif., Aug. 16, 2023 /PRNewswire/ — CyCognito, an External Attack Surface Management platform, as we speak launched its semi-annual “State of External Exposure Management,” revealing a staggering variety of susceptible public cloud, cell and internet functions exposing delicate information, together with unsecured APIs and private identifiable info (PII). Developed by CyCognito’s analysis division, the report is predicated on the evaluation of three.5 million property throughout its enterprise buyer base, together with plenty of Fortune 500 corporations.
“The newest MOVEit exploit is a cautionary story for all CISOs that attackers stay many steps forward of internet utility and cloud safety,” mentioned Rob Gurzeev, CEO and co-founder of CyCognito. “The quantity of uncovered PII stemming from this disastrous breach helps our findings and underscores the crucial want for full-scope visibility of all property throughout a corporation’s assault floor. Businesses can now not afford to neglect their digital shadow and the various unknown and unmanaged dangers inside their programs.”
Click right here to obtain the complete report.
Key findings embody:
- 74 p.c of property with PII are susceptible to at the very least one identified main exploit, and one in 10 have at the very least one simply exploitable challenge.
- 70 p.c of internet functions have extreme safety gaps, like missing WAF safety or an encrypted connection like HTTPS, whereas 25 p.c of all internet functions (internet apps) lacked each.
- The typical international enterprise has over 12 thousand internet apps, which embody APIs, SaaS functions, servers, and databases, amongst others. At least 30 p.c of those internet apps—over 3,000 property—have at the very least one exploitable or excessive danger vulnerability. Half of those doubtlessly susceptible internet apps are hosted within the cloud.
- 98 p.c of internet apps are doubtlessly GDPR non-compliant on account of lack of alternative for customers to choose out of cookies.
Gurzeev continued, “The measurement of an organization’s assault floor fluctuates up and down by as a lot as 10 p.c a month, making it a transferring goal rife with safety gaps able to be exploited. Our newest analysis is just not solely a wake-up name that no enterprise is proof against danger; it is also clear proof that unknown and undiscovered property current a serious risk to a corporation.”
ABOUT CYCOGNITO
CyCognito solves one of the vital elementary enterprise issues in cybersecurity: seeing how attackers view your group, the place they’re almost certainly to interrupt in, what programs and property are in danger and how one can get rid of the publicity. Founded by nationwide intelligence company veterans, CyCognito has a deep understanding of how attackers exploit blind spots and a path of least resistance. Based in Palo Alto, CyCognito serves plenty of giant enterprises and Fortune 500 organizations, together with Colgate-Palmolive, Tesco and plenty of others.