Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
Some 88% of the critical and high-severity weaknesses found in live attack tests on enterprise environments this year would not have been identified through vendor advisories or other outside sources, new data has suggested. The figure comes from a report published on November 2 by Armadin, the offensive security startup launched by Mandiant founder Kevin Mandia, based on AI-driven attacks against its clients’ live systems.
Key Findings:
- 67% of the critical findings were defects in software the clients had written themselves.
- 24% of vendor products deployed in ways no advisory describes, such as administrative consoles exposed to the internet.
- 9% of critical findings were zero-days Armadin found itself.
Nearly 70% of critical and high findings sat on the unauthenticated attack surface. Of the documented attack chains, 82% began without credentials, and 56% of those went on without a password or key ever being presented. In more than 70% of client environments, Armadin said it reached a critical outcome in three steps or fewer without valid credentials.
Recommendations:
- Policies for provisioning, storing, and rotating service account credentials.
- Checks of pipelines and code repositories for exposed secrets.
By its count, 93% of severe findings needed no third party to act, leaving the fix in each organization’s own hands.
For more details, check the full article here: Read full article