Internet-exposed assets reveal industry vulnerability profiles

New analysis from CyCognito of over two million internet-exposed assets, across on-prem, cloud, APIs, and web apps, identifies exploitable assets across several key industries, using techniques that simulate real-world attacker behavior. Techniques used include black-box pentesting using 90,000+ exploit modules, credential stuffing simulations, data exposure detection, etc. The study also used Dynamic Application Security Testing (DAST) to identify runtime web application vulnerabilities, as well as active vulnerability scanning of internet-facing services to detect CVEs, misconfigurations, and exposed assets. Cloud assets account for 13.6 percent of those exposed, APIs 20.8 percent and web applications 19.6 percent. The proliferation of APIs and… [Continue Reading]