Unit 42 Attack Surface Threat Research: Constant Change in Cloud Contributes to 45% of New High/Critical Exposures Per Month
Summary: Unit 42's survey of more than 250 organizations found that 80% of security exposures are in cloud environments and that over 20% of externally accessible cloud services change every month. More than 45% of organizations' high-risk cloud-hosted exposures in a given month appeared on new services that were not on their attack surface the month before.
What you should know: Nearly half of the high-criticality exposures a security team faces each month sit on services that did not exist the month prior, so a point-in-time inventory is out of date almost as soon as it is produced. Eight of the nine organizations studied also had internet-accessible RDP open to brute-force attacks for at least 25% of the month.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026