ALO ALTO, Calif., Aug. 16, 2023 /PRNewswire/ — CyCognito, an Exterior Assault Floor Administration platform, at this time launched its semi-annual “State of Exterior Publicity Administration,” revealing a staggering variety of susceptible public cloud, cell and internet purposes exposing delicate information, together with unsecured APIs and private identifiable data (PII). Developed by CyCognito’s analysis division, the report is predicated on the evaluation of three.5 million belongings throughout its enterprise buyer base, together with quite a few Fortune 500 corporations.
“The newest MOVEit exploit is a cautionary story for all CISOs that attackers stay many steps forward of internet utility and cloud safety,” mentioned Rob Gurzeev, CEO and co-founder of CyCognito. “The quantity of uncovered PII stemming from this disastrous breach helps our findings and underscores the crucial want for full-scope visibility of all belongings throughout a company’s assault floor. Companies can not afford to neglect their digital shadow and the numerous unknown and unmanaged dangers inside their programs.”
Click on right here to obtain the total report.
Key findings embrace:
- 74 p.c of belongings with PII are susceptible to a minimum of one recognized main exploit, and one in 10 have a minimum of one simply exploitable situation.
- 70 p.c of internet purposes have extreme safety gaps, like missing WAF safety or an encrypted connection like HTTPS, whereas 25 p.c of all internet purposes (internet apps) lacked each.
- The standard international enterprise has over 12 thousand internet apps, which embrace APIs, SaaS purposes, servers, and databases, amongst others. At the very least 30 p.c of those internet apps—over 3,000 belongings—have a minimum of one exploitable or excessive threat vulnerability. Half of those doubtlessly susceptible internet apps are hosted within the cloud.
- 98 p.c of internet apps are doubtlessly GDPR non-compliant because of lack of alternative for customers to decide out of cookies.
Gurzeev continued, “The scale of an organization’s assault floor fluctuates up and down by as a lot as 10 p.c a month, making it a shifting goal rife with safety gaps able to be exploited. Our newest analysis isn’t solely a wake-up name that no enterprise is proof against threat; it is also clear proof that unknown and undiscovered belongings current a serious menace to a company.”
ABOUT CYCOGNITO
CyCognito solves probably the most basic enterprise issues in cybersecurity: seeing how attackers view your group, the place they’re almost certainly to interrupt in, what programs and belongings are in danger and how one can get rid of the publicity. Based by nationwide intelligence company veterans, CyCognito has a deep understanding of how attackers exploit blind spots and a path of least resistance. Primarily based in Palo Alto, CyCognito serves quite a few massive enterprises and Fortune 500 organizations, together with Colgate-Palmolive, Tesco and plenty of others.
