Day 8 #100cyberdays 🎯

💠 Anatomy of a modern attack surface: Six areas for organizations to manage Microsoft Security

⚡  The world becomes more connected and digital, cybersecurity is becoming more complex. Hence security teams must defend broader, dynamic and an expanded attack surfaces.

Six areas for organizations to manage:

🔴 Email - daily essential but remains the top threat factor/vector.

🔴 Expanded identity - Access must be secured, hence gaining a deep understanding of identity across your organization — including user account permissions, workload identities, and their potential vulnerabilities — is vital

🔴 Hybrid environments - securing endpoints can be challenging, particularly unmanaged devices — is critical to a strong security posture, since even one compromise can give threat actors entry into your organization.

🔴 IoT devices - As the number of IoT devices grows, so does the number of vulnerabilities.

🔴 Cloud - protecting the environment is crucial and critical, because defending a range of services, including SaaS, IaaS and PaaS, distributed across multiple clouds.

🔴 External surface - external attack surface spans multiple clouds, complex digital supply chains and massive third-party ecosystems. The internet is now part of the network, and despite its almost unfathomable size, security teams must defend their organization’s presence throughout the internet to the same degree as everything behind their firewalls.