Unlike other surveys, which take a defender’s point of view and leverage past trends to predict the future, our report flips the script to explore how adversaries view environments and to uncover insights into where they find the most success. By better understanding the minds and methods of attackers, defenders can improve their security posture and refine offensive and defensive strategies.

Key Highlights From the Report

Which Exploitable Exposures Are Most Often Found on the Perimeter?

Attackers take the path of least resistance to exploit their targets. Our research indicates they frequently have lots of options to choose from. Respondents reported all of the exposure types we surveyed on were quite common, except for abandoned domains/subdomains. Vulnerable configurations topped the list, with exposed web services and vulnerable software right behind.

How Quickly Can Your Data Be Exfiltrated?

Nearly 64% of ethical hackers reported being able to collect and potentially exfiltrate data in five hours or less once they had gained access to an environment, and an astonishing 41% were successful in two hours or less. As adversaries get “further along” in their attacks, they often either gain speed advantages (due to lack of detection), or become so familiar with the environment that exfiltration is radically simplified.

How Do Detection & Response Capabilities Stack Up?

Shockingly, 74% of survey respondents indicated that only few or some organizations have sufficient detection and response capabilities to effectively stop an attack. Adversaries realize that the ability to detect and respond is still significantly inadequate and use it to their advantage. Get the complete report to see if defenders did any better when it comes to preventing, detecting, and responding to cloud- and application-specific attacks.

Continue your journey into the minds and methods of modern adversaries and see how you can improve proactive defenses against common attacks. Get the full report now.