Fast-paced growth in modern business has created major blind spots for security teams. Distributed assets are multiplying due to global digital transformation, increased reliance on cloud-service providers and third-party vendors, and the transition to hybrid work environments. This has put a strain on external attack surface management. According to a report by the Enterprise Strategy Group, 69% of companies admit they have experienced at least one cyberattack that started by exploiting an unknown or unmanaged internet-facing asset. 

Yaron Tal, founder and CTO at Reposify, suggests companies must lead by example, and harden their external attack surface security to make it more difficult for attackers to gain a foothold in their systems, beginning with a clear view of their external attack surface and continuous monitoring and elimination of risky attack vectors.

Additional findings include: 

1. The impact of the fast-paced transition to a fully remote, digital environment. Of the assets discovered on remote access sites, 89% were classified as part of the unofficial perimeter. Similarly, 87% of databases were unaccounted for, with 67% on development tools and 62% of all network assets. 
2. Databases are among the most vulnerable to a cybersecurity threat. More than half (51%) of companies host an exposed database, and out of the companies identified as having an exposed database, 72% have exposed PostgreSQL databases, and 50% with exposed Oracledb databases.
3. Forty-two percent of the exposed assets discovered were of high or critical severity. Thirty percent of issues found were categorized as high severity, and 11% at critical severity. 

The full report is available here.