Constant Scanning, Exploring, Probing

Garret Grajek is CEO of YouAttest. He said data breaches are the outcome of constant scanning, exploring and probing on all internet resources.

“Attackers use automated tools for 24/7 scanning,” he said. “They then automate mapping to vulnerabilities and map exploitation tools to the discovered vulnerabilities. This is why zero-day hacks are, by nature, ahead of the patches. Bad actors find the vulnerability before vendors have identified them, let alone patched them. It’s essential to use hardened platforms and adhere to solid security practices like … the principle of least privilege. We must assume our sites and the credentials themselves will be hacked and ensure that each identity provides the least amount of exposure to the enterprise resources. This is best practiced through identity triggers and reviews, which help an enterprise discover over-privileged identities and malicious changes to permissions of compromised identities.”