Loading story…
Organizations are facing increased cybersecurity risks due to the rapid expansion of their digital infrastructure, including cloud platforms, mobile devices, IoT, and third-party integrations. As the attack surface grows, maintaining visibility and control becomes more difficult, making proactive strategies like attack surface management and continuous threat exposure management essential. Security teams are urged to adopt structured, ongoing approaches to identify and remediate vulnerabilities before they can be exploited, with a particular emphasis on the importance of effective cloud security architecture and the challenges of managing multi-cloud environments.
A critical aspect of reducing enterprise risk is ensuring that all software, especially third-party applications, is regularly patched to address known vulnerabilities. Unpatched software on everyday work devices remains a significant entry point for attackers, as cybercriminals actively exploit outdated applications and operating systems. Best practices for cloud and multi-cloud security, including centralized authority, unified policies, and comprehensive patch management, are recommended to build a resilient security posture and protect against evolving threats.
Map this exposure pattern across your cloud, code, and identities.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
6 references tracked. Mallory keeps watching after this page renders.
blackfog.com
Open sourceblackfog.com
Open sourceblackfog.com
Open sourceblog.comodo.com
Open sourcesecuritysenses.com
Open sourcecsoonline.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Effective patch management and vulnerability management are critical components of a robust cybersecurity strategy for organizations. Patch management involves the systematic identification, testing, and deployment of software updates to address known vulnerabilities, reduce exposure to exploits, and maintain system stability. A well-defined patch management policy ensures that updates are applied consistently, roles and responsibilities are clear, and compliance requirements are met. In contrast, vulnerability management encompasses a broader process of identifying, analyzing, prioritizing, and remediating weaknesses across the IT environment, including misconfigurations, outdated software, and missing patches. Both processes must work in tandem to minimize risk and prevent attackers from exploiting known flaws. Recent research highlights that overlooked devices such as multifunction printers (MFPs) can significantly expand an organization's attack surface if not properly managed. Many MFPs are deployed without adequate patch cycles, password changes, or network segmentation, making them attractive targets for attackers seeking credential theft or lateral movement. Penetration testing data confirms that default settings and inconsistent patch management practices leave these devices vulnerable, underscoring the importance of integrating all networked assets into comprehensive patch and vulnerability management programs.
Jun 29, 2026
Enterprise organizations are increasingly recognizing the convergence of cyber and operational risks, particularly as reliance on cloud infrastructure grows. Recent high-profile outages, such as the AWS US East 1 incident, have demonstrated that disruptions—whether caused by technical failures or cyberattacks—can have similar operational and reputational impacts. Security leaders are urged to prioritize preparedness, scenario planning, and governance to address these challenges, as traditional backup architectures may not be sufficient to mitigate the cascading effects of cloud service failures. The growing adoption of hybrid and multi-cloud environments, driven by business needs and AI integration, further complicates risk management, requiring organizations to adapt their security strategies to address the unique challenges posed by cloud diversity and complexity. Surveys and expert commentary highlight that a majority of organizations now depend on hybrid or multi-cloud strategies, with a significant portion planning further cloud adoption. This shift necessitates a holistic approach to cloud risk, emphasizing the importance of resilience, compliance, and proactive risk mitigation. Security teams must navigate the increased attack surface and operational dependencies introduced by cloud environments, ensuring that both technical and organizational measures are in place to manage and contain cloud-related risks effectively. The evolving landscape underscores the need for continuous adaptation of cybersecurity strategies to safeguard critical business functions in an era of ubiquitous cloud reliance.
Jun 29, 2026
Organizations are facing a rapidly evolving cyber risk landscape as the boundaries between IT, operational technology (OT), Internet of Things (IoT), and supply chain systems blur. The proliferation of connected devices, such as cameras, badge readers, HVAC systems, and factory controllers, has significantly increased the attack surface for enterprises. Business demands have driven the integration of IT, OT, and IoT, enabling telemetry to inform analytics and automation, but also concentrating dependencies on critical control planes like cloud consoles and APIs. This interconnectedness means that a single compromised identity provider, software updater, or remote management tool can serve as a single point of failure, potentially impacting thousands of endpoints and critical business processes. Security leaders emphasize the importance of maintaining a living inventory of assets, applying least privilege principles, and segmenting networks by function and criticality to mitigate these risks. Unknown or unmanaged devices should be treated as unsafe until proven otherwise, and where devices lack robust security features, organizations are advised to broker connections through secure gateways. The challenge is compounded by resource constraints and the long lifecycles of many IoT and OT devices, which often cannot be easily updated or replaced. The expansion of cyber risk also extends to the supply chain, where third-party vendors, contractors, and service providers can become entry points for attackers. Recent high-profile breaches have demonstrated that adversaries exploit trusted relationships to infiltrate organizations, with the fallout often affecting the victim company regardless of where the breach originated. This complexity is frequently invisible to the public and regulators, leading to reputational damage and loss of narrative control for affected organizations. Effective cyber readiness now requires extensive preparation, including scenario exercises, communication planning, and training to operate under pressure. The shift from endpoint-centric to control plane-centric risk management reflects the need to address the realities of modern, interconnected business environments. Organizations must adopt an "assume breach" mindset and focus on resilience and recovery planning, not just prevention. The evolving threat landscape demands that security strategies account for the full spectrum of connected assets and the intricate web of dependencies that define today's enterprises. As the definition of cyber risk continues to expand, so too must the approaches to visibility, segmentation, and incident response. Ultimately, the ability to manage and recover from cyber incidents hinges on preparation, visibility, and the recognition that every connected asset and relationship represents a potential risk vector.
Jul 12, 2026