CyCognito Finds Large Volume of Personal Identifiable Information in Vulnerable Cloud and Web Applications

“The most recent MOVEit exploit is a cautionary story for all CISOs that attackers stay many steps forward of internet utility and cloud safety,” stated Rob Gurzeev, CEO and co-founder of CyCognito. “The quantity of uncovered PII stemming from this disastrous breach helps our findings and underscores the vital want for full-scope visibility of all property throughout a company’s assault floor. Companies can now not afford to neglect their digital shadow and the numerous unknown and unmanaged dangers inside their programs.”

Click on right here to obtain the complete report.

Key findings embody:

• 74 % of property with PII are weak to at the least one identified main exploit, and one in 10 have at the least one simply exploitable difficulty.
• 70 % of internet functions have extreme safety gaps, like missing WAF safety or an encrypted connection like HTTPS, whereas 25 % of all internet functions (internet apps) lacked each.
• The everyday international enterprise has over 12 thousand internet apps, which embody APIs, SaaS functions, servers, and databases, amongst others. A minimum of 30 % of those internet apps—over 3,000 property—have at the least one exploitable or excessive threat vulnerability. Half of those probably weak internet apps are hosted within the cloud. 
• 98 % of internet apps are probably GDPR non-compliant on account of lack of alternative for customers to choose out of cookies.  

Gurzeev continued, “The dimensions of an organization’s assault floor fluctuates up and down by as a lot as 10 % a month, making it a shifting goal rife with safety gaps able to be exploited. Our newest analysis isn’t solely a wake-up name that no enterprise is resistant to threat; it is also clear proof that unknown and undiscovered property current a significant menace to a company.”

ABOUT CYCOGNITO

CyCognito solves one of the basic enterprise issues in cybersecurity: seeing how attackers view your group, the place they’re most certainly to interrupt in, what programs and property are in danger and how one can eradicate the publicity. Based by nationwide intelligence company veterans, CyCognito has a deep understanding of how attackers exploit blind spots and a path of least resistance. Primarily based in Palo Alto, CyCognito serves numerous massive enterprises and Fortune 500 organizations, together with Colgate-Palmolive, Tesco and plenty of others.