Pen Testing Firm Claims 92% Successful Breach Rate of Their Clients

guest · Feb 8, 2019

Pen Testing Firm Claims 92% Successful Breach Rate of Their Clients
February 8, 2019
https://latesthackingnews.com/2019/...s-92-successful-breach-rate-of-their-clients/

On the 6 February, cyber-security firm Positive Technologies published its penetration testing activity report for 2018. The firm claimed that its researchers breached the external perimeter and gained access to the internal networks of 92 percent of the companies they tested.
Test Report
Positive Technologies placed most of these successes on vulnerabilities in the source code external-facing web applications. The company’s findings found that 75 percent of exploitation were because of web resources.

Pentesters found that they were able to gain access to internal computers and servers. This included critical resources such as SWIFT money transfer and ATM controls.
No Company Was Perfect
Positive Technologies discovered that even those companies that offered strong security, there was always at least one way open to hackers. Some of these companies were using strong WiFi authentication, had well-trained employees, and were resistant to brute-force attacks.
Click to expand...

guest · Feb 8, 2019

mood said: ↑

Pen Testing Firm Claims 92% Successful Breach Rate of Their Clients
February 8, 2019
https://latesthackingnews.com/2019/...s-92-successful-breach-rate-of-their-clients/
Click to expand...

Positive Technologies Report: Penetration testing of corporate information systems: statistics and findings, 2019

guest · Jul 30, 2019

95% of Pen Test Problems Can Be Easily Resolved
July 30, 2019
https://www.infosecurity-magazine.com/news/95-test-problems/

The most common configuration problems found in the majority of penetration tests can be easily resolved with straightforward fixes.
nalysis from more than 50 engagements in the first half of 2019 by Lares, shared exclusively with Infosecurity, found that the top five penetration test discoveries are: [...] Chris Nickerson, founder of Lares, said that these top five findings were common in “95% of the tests.”

Infosecurity asked Nickerson if he felt that four of the top five most common findings being fixed with common techniques was a positive thing, or if it was demoralizing that basic securty is proving to be so difficult?
Nickerson said: “It seems to me that these techniques are not only the basics, but they have been a common way to compromise enterprises for years. [...]"
Click to expand...

Top five penetration test discoveries:

Brute forcing accounts with weak and guessable passwords

Kerberoasting

Excessive file system permissions

WannaCry/EternalBlue

Windows Management Instrumentation (WMI) lateral movement

Click to expand...

guest · Apr 6, 2020

Common Flaws Discovered in Penetration Tests Persist
April 6, 2020
https://www.infosecurity-magazine.com/news/flaws-persist-penetration

Brute forcing accounts with weak and guessable passwords, and exploitation using the EternalBlue vulnerability remain among the top 10 findings in penetration tests.

According to research by Lares, the most frequently encountered vulnerabilities and attack vectors during engagements in the past six months have remained exactly the same as in it's previous report, which came out in July last year.
Its latest report analyzed the similarities between hundreds of engagements throughout 2019 [...]

In an email to Infosecurity, Lares COO Andrew Hay said that a mix of the top findings are seen in “nearly every engagement.” He said: “Our analysis concludes that regardless of industry or vertical, these findings are evident in most environments we assess.”
Click to expand...

Lares: Announcing the 2019 Top 10 Penetration Test Findings Report

Lares® encounters a seemingly endless number of vulnerabilities when we conduct a penetration test or red team engagement, regardless of organization size or maturity.
This report is a follow-on report to our previously published Lares Top 5 Penetration Test Findings For 1H 2019 report.
Click to expand...

Log in or Sign up

Pen Testing Firm Claims 92% Successful Breach Rate of Their Clients

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Pen Testing Firm Claims 92% Successful Breach Rate of Their Clients

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches